OPENSUSE-SU-2026:12098-1
Vulnerability from csaf_opensuse - Published: 2026-10-10 00:00 - Updated: 2026-10-11 11:56Summary
MozillaThunderbird-153.4.0-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: MozillaThunderbird-153.4.0-1.1 on GA media
Description of the patch: These are all security issues fixed in the MozillaThunderbird-153.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-12098
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
5.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
8.8 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
5.4 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
4.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
8.8 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-100756
Threats
Impact
critical
References
433 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "MozillaThunderbird-153.4.0-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the MozillaThunderbird-153.4.0-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-12098",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12098-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100756 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100757 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100758 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100758/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100759 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100760 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100762 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100765 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100766 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100767 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100769 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100770 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100770/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100771 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100771/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100772 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100773 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100773/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100774 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100775 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100776 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100776/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100777 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100778 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100779 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100780 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100781 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100781/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100782 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100782/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100783 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100783/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100784 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100784/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100785 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100785/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100786 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100787 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100788 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100788/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100789 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100789/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100790 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100791 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100792 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100794 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100797 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100798 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100800 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100801 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100803 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100803/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100806 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100806/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100807 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100807/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100808 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100808/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100809 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100811 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100812 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100812/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100814 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100815 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100816 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100818 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100819 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100820 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100820/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100821 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100822 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100824 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100825 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100826 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100826/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100828 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100829 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100830 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100831 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-100832 page",
"url": "https://www.suse.com/security/cve/CVE-2026-100832/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-103500 page",
"url": "https://www.suse.com/security/cve/CVE-2026-103500/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74937 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74937/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74938 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74947 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74950 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74952 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74954 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74954/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74955 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74955/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74956 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74956/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74958 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74961 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74966 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74966/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74968 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74968/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74970 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74970/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74977 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74978 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74979 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74979/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74981 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74982 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74984 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74985 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74985/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74986 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-74988 page",
"url": "https://www.suse.com/security/cve/CVE-2026-74988/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84118 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84123 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84123/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84125 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84129 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84130 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84132 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84133 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84134 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84136 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84137 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84137/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84139 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84139/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84140 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84140/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84141 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84144 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84637 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84642 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84642/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92035 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92035/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92038 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92038/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92039 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92041 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92041/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92042 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92043 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92044 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92045 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92045/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92046 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92046/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92047 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92048 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92049 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92049/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92052 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92052/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92053 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92053/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92054 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92054/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92055 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92055/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92056 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92057 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92057/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92058 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92059 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92060 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92060/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92062 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92064 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92065 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92065/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92067 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92067/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92068 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92068/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92069 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92069/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92070 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92070/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92071 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92071/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92072 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92072/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92073 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92073/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92074 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92074/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92075 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92076 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92076/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92077 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92077/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92078 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92078/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-92079 page",
"url": "https://www.suse.com/security/cve/CVE-2026-92079/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-96869 page",
"url": "https://www.suse.com/security/cve/CVE-2026-96869/"
}
],
"title": "MozillaThunderbird-153.4.0-1.1 on GA media",
"tracking": {
"current_release_date": "2026-10-11T11:56:13Z",
"generator": {
"date": "2026-10-10T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:12098-1",
"initial_release_date": "2026-10-10T00:00:00Z",
"revision_history": [
{
"date": "2026-10-10T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-11T11:56:13Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-0:153.4.0-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-0:153.4.0-1.1.aarch64",
"product_id": "MozillaThunderbird-0:153.4.0-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:thunderbird:153.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/MozillaThunderbird@153.4.0-1.1?arch=aarch64\u0026upstream=MozillaThunderbird-0:153.4.0-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"product_id": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/MozillaThunderbird-openpgp-librnp@153.4.0-1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"product_id": "MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:thunderbird:153.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/MozillaThunderbird-translations-common@153.4.0-1.1?arch=aarch64\u0026upstream=MozillaThunderbird-0:153.4.0-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"product": {
"name": "MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"product_id": "MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:thunderbird:153.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/MozillaThunderbird-translations-other@153.4.0-1.1?arch=aarch64\u0026upstream=MozillaThunderbird-0:153.4.0-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"product_id": "MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:thunderbird:153.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/MozillaThunderbird@153.4.0-1.1?arch=ppc64le\u0026upstream=MozillaThunderbird-0:153.4.0-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"product_id": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/MozillaThunderbird-openpgp-librnp@153.4.0-1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"product_id": "MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:thunderbird:153.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/MozillaThunderbird-translations-common@153.4.0-1.1?arch=ppc64le\u0026upstream=MozillaThunderbird-0:153.4.0-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"product": {
"name": "MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"product_id": "MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:thunderbird:153.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/MozillaThunderbird-translations-other@153.4.0-1.1?arch=ppc64le\u0026upstream=MozillaThunderbird-0:153.4.0-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-0:153.4.0-1.1.s390x",
"product": {
"name": "MozillaThunderbird-0:153.4.0-1.1.s390x",
"product_id": "MozillaThunderbird-0:153.4.0-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:thunderbird:153.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/MozillaThunderbird@153.4.0-1.1?arch=s390x\u0026upstream=MozillaThunderbird-0:153.4.0-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"product": {
"name": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"product_id": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/MozillaThunderbird-openpgp-librnp@153.4.0-1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"product": {
"name": "MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"product_id": "MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:thunderbird:153.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/MozillaThunderbird-translations-common@153.4.0-1.1?arch=s390x\u0026upstream=MozillaThunderbird-0:153.4.0-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"product": {
"name": "MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"product_id": "MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:thunderbird:153.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/MozillaThunderbird-translations-other@153.4.0-1.1?arch=s390x\u0026upstream=MozillaThunderbird-0:153.4.0-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "MozillaThunderbird-0:153.4.0-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-0:153.4.0-1.1.x86_64",
"product_id": "MozillaThunderbird-0:153.4.0-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:thunderbird:153.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/MozillaThunderbird@153.4.0-1.1?arch=x86_64\u0026upstream=MozillaThunderbird-0:153.4.0-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"product_id": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/MozillaThunderbird-openpgp-librnp@153.4.0-1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"product_id": "MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:thunderbird:153.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/MozillaThunderbird-translations-common@153.4.0-1.1?arch=x86_64\u0026upstream=MozillaThunderbird-0:153.4.0-1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64",
"product": {
"name": "MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64",
"product_id": "MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:mozilla:thunderbird:153.4.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/MozillaThunderbird-translations-other@153.4.0-1.1?arch=x86_64\u0026upstream=MozillaThunderbird-0:153.4.0-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-0:153.4.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-0:153.4.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-0:153.4.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-0:153.4.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x"
},
"product_reference": "MozillaThunderbird-0:153.4.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-0:153.4.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-0:153.4.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x"
},
"product_reference": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x"
},
"product_reference": "MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64"
},
"product_reference": "MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le"
},
"product_reference": "MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x"
},
"product_reference": "MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
},
"product_reference": "MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-100756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100756"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100756",
"url": "https://www.suse.com/security/cve/CVE-2026-100756"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100756",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100756"
},
{
"cve": "CVE-2026-100757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100757"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100757",
"url": "https://www.suse.com/security/cve/CVE-2026-100757"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100757",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100757"
},
{
"cve": "CVE-2026-100758",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100758"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100758",
"url": "https://www.suse.com/security/cve/CVE-2026-100758"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100758",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100758"
},
{
"cve": "CVE-2026-100759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100759"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100759",
"url": "https://www.suse.com/security/cve/CVE-2026-100759"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100759",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100759"
},
{
"cve": "CVE-2026-100760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100760"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100760",
"url": "https://www.suse.com/security/cve/CVE-2026-100760"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100760",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100760"
},
{
"cve": "CVE-2026-100762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100762"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100762",
"url": "https://www.suse.com/security/cve/CVE-2026-100762"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100762",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100762"
},
{
"cve": "CVE-2026-100765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100765"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100765",
"url": "https://www.suse.com/security/cve/CVE-2026-100765"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100765",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100765"
},
{
"cve": "CVE-2026-100766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100766"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100766",
"url": "https://www.suse.com/security/cve/CVE-2026-100766"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100766",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100766"
},
{
"cve": "CVE-2026-100767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100767"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100767",
"url": "https://www.suse.com/security/cve/CVE-2026-100767"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100767",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100767"
},
{
"cve": "CVE-2026-100769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100769"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100769",
"url": "https://www.suse.com/security/cve/CVE-2026-100769"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100769",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100769"
},
{
"cve": "CVE-2026-100770",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100770"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100770",
"url": "https://www.suse.com/security/cve/CVE-2026-100770"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100770",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100770"
},
{
"cve": "CVE-2026-100771",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100771"
}
],
"notes": [
{
"category": "general",
"text": "Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100771",
"url": "https://www.suse.com/security/cve/CVE-2026-100771"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100771",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100771"
},
{
"cve": "CVE-2026-100772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100772"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100772",
"url": "https://www.suse.com/security/cve/CVE-2026-100772"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100772",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100772"
},
{
"cve": "CVE-2026-100773",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100773"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100773",
"url": "https://www.suse.com/security/cve/CVE-2026-100773"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100773",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100773"
},
{
"cve": "CVE-2026-100774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100774"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100774",
"url": "https://www.suse.com/security/cve/CVE-2026-100774"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100774",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100774"
},
{
"cve": "CVE-2026-100775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100775"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100775",
"url": "https://www.suse.com/security/cve/CVE-2026-100775"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100775",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100775"
},
{
"cve": "CVE-2026-100776",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100776"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100776",
"url": "https://www.suse.com/security/cve/CVE-2026-100776"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100776",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100776"
},
{
"cve": "CVE-2026-100777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100777"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100777",
"url": "https://www.suse.com/security/cve/CVE-2026-100777"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100777",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100777"
},
{
"cve": "CVE-2026-100778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100778"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100778",
"url": "https://www.suse.com/security/cve/CVE-2026-100778"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100778",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100778"
},
{
"cve": "CVE-2026-100779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100779"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100779",
"url": "https://www.suse.com/security/cve/CVE-2026-100779"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100779",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100779"
},
{
"cve": "CVE-2026-100780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100780"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100780",
"url": "https://www.suse.com/security/cve/CVE-2026-100780"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100780",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100780"
},
{
"cve": "CVE-2026-100781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100781"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100781",
"url": "https://www.suse.com/security/cve/CVE-2026-100781"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100781",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100781"
},
{
"cve": "CVE-2026-100782",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100782"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100782",
"url": "https://www.suse.com/security/cve/CVE-2026-100782"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100782",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100782"
},
{
"cve": "CVE-2026-100783",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100783"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100783",
"url": "https://www.suse.com/security/cve/CVE-2026-100783"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100783",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100783"
},
{
"cve": "CVE-2026-100784",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100784"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100784",
"url": "https://www.suse.com/security/cve/CVE-2026-100784"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100784",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100784"
},
{
"cve": "CVE-2026-100785",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100785"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100785",
"url": "https://www.suse.com/security/cve/CVE-2026-100785"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100785",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100785"
},
{
"cve": "CVE-2026-100786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100786"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100786",
"url": "https://www.suse.com/security/cve/CVE-2026-100786"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100786",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100786"
},
{
"cve": "CVE-2026-100787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100787"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100787",
"url": "https://www.suse.com/security/cve/CVE-2026-100787"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100787",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100787"
},
{
"cve": "CVE-2026-100788",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100788"
}
],
"notes": [
{
"category": "general",
"text": "Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100788",
"url": "https://www.suse.com/security/cve/CVE-2026-100788"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100788",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100788"
},
{
"cve": "CVE-2026-100789",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100789"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100789",
"url": "https://www.suse.com/security/cve/CVE-2026-100789"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100789",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100789"
},
{
"cve": "CVE-2026-100790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100790"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100790",
"url": "https://www.suse.com/security/cve/CVE-2026-100790"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100790",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100790"
},
{
"cve": "CVE-2026-100791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100791"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100791",
"url": "https://www.suse.com/security/cve/CVE-2026-100791"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100791",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100791"
},
{
"cve": "CVE-2026-100792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100792"
}
],
"notes": [
{
"category": "general",
"text": "JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100792",
"url": "https://www.suse.com/security/cve/CVE-2026-100792"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100792",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100792"
},
{
"cve": "CVE-2026-100794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100794"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100794",
"url": "https://www.suse.com/security/cve/CVE-2026-100794"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100794",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100794"
},
{
"cve": "CVE-2026-100797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100797"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100797",
"url": "https://www.suse.com/security/cve/CVE-2026-100797"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100797",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100797"
},
{
"cve": "CVE-2026-100798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100798"
}
],
"notes": [
{
"category": "general",
"text": "Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100798",
"url": "https://www.suse.com/security/cve/CVE-2026-100798"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100798",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100798"
},
{
"cve": "CVE-2026-100800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100800"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100800",
"url": "https://www.suse.com/security/cve/CVE-2026-100800"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100800",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100800"
},
{
"cve": "CVE-2026-100801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100801"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100801",
"url": "https://www.suse.com/security/cve/CVE-2026-100801"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100801",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100801"
},
{
"cve": "CVE-2026-100803",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100803"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100803",
"url": "https://www.suse.com/security/cve/CVE-2026-100803"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100803",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100803"
},
{
"cve": "CVE-2026-100806",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100806"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100806",
"url": "https://www.suse.com/security/cve/CVE-2026-100806"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100806",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100806"
},
{
"cve": "CVE-2026-100807",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100807"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100807",
"url": "https://www.suse.com/security/cve/CVE-2026-100807"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100807",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100807"
},
{
"cve": "CVE-2026-100808",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100808"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100808",
"url": "https://www.suse.com/security/cve/CVE-2026-100808"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100808",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100808"
},
{
"cve": "CVE-2026-100809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100809"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100809",
"url": "https://www.suse.com/security/cve/CVE-2026-100809"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100809",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100809"
},
{
"cve": "CVE-2026-100811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100811"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100811",
"url": "https://www.suse.com/security/cve/CVE-2026-100811"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100811",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100811"
},
{
"cve": "CVE-2026-100812",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100812"
}
],
"notes": [
{
"category": "general",
"text": "Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100812",
"url": "https://www.suse.com/security/cve/CVE-2026-100812"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100812",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100812"
},
{
"cve": "CVE-2026-100814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100814"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100814",
"url": "https://www.suse.com/security/cve/CVE-2026-100814"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100814",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100814"
},
{
"cve": "CVE-2026-100815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100815"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100815",
"url": "https://www.suse.com/security/cve/CVE-2026-100815"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100815",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100815"
},
{
"cve": "CVE-2026-100816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100816"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100816",
"url": "https://www.suse.com/security/cve/CVE-2026-100816"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100816",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100816"
},
{
"cve": "CVE-2026-100818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100818"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100818",
"url": "https://www.suse.com/security/cve/CVE-2026-100818"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100818",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100818"
},
{
"cve": "CVE-2026-100819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100819"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100819",
"url": "https://www.suse.com/security/cve/CVE-2026-100819"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100819",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100819"
},
{
"cve": "CVE-2026-100820",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100820"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100820",
"url": "https://www.suse.com/security/cve/CVE-2026-100820"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100820",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100820"
},
{
"cve": "CVE-2026-100821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100821"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100821",
"url": "https://www.suse.com/security/cve/CVE-2026-100821"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100821",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100821"
},
{
"cve": "CVE-2026-100822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100822"
}
],
"notes": [
{
"category": "general",
"text": "Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100822",
"url": "https://www.suse.com/security/cve/CVE-2026-100822"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100822",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100822"
},
{
"cve": "CVE-2026-100824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100824"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100824",
"url": "https://www.suse.com/security/cve/CVE-2026-100824"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100824",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100824"
},
{
"cve": "CVE-2026-100825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100825"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100825",
"url": "https://www.suse.com/security/cve/CVE-2026-100825"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100825",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100825"
},
{
"cve": "CVE-2026-100826",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100826"
}
],
"notes": [
{
"category": "general",
"text": "Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100826",
"url": "https://www.suse.com/security/cve/CVE-2026-100826"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100826",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100826"
},
{
"cve": "CVE-2026-100828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100828"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Bookmarks \u0026 History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100828",
"url": "https://www.suse.com/security/cve/CVE-2026-100828"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100828",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100828"
},
{
"cve": "CVE-2026-100829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100829"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100829",
"url": "https://www.suse.com/security/cve/CVE-2026-100829"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100829",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100829"
},
{
"cve": "CVE-2026-100830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100830"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100830",
"url": "https://www.suse.com/security/cve/CVE-2026-100830"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100830",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100830"
},
{
"cve": "CVE-2026-100831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100831"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the DOM: UI Events \u0026 Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100831",
"url": "https://www.suse.com/security/cve/CVE-2026-100831"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100831",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100831"
},
{
"cve": "CVE-2026-100832",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-100832"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-100832",
"url": "https://www.suse.com/security/cve/CVE-2026-100832"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-100832",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-100832"
},
{
"cve": "CVE-2026-103500",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-103500"
}
],
"notes": [
{
"category": "general",
"text": "An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-103500",
"url": "https://www.suse.com/security/cve/CVE-2026-103500"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-103500",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-103500"
},
{
"cve": "CVE-2026-74937",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74937"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74937",
"url": "https://www.suse.com/security/cve/CVE-2026-74937"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74937",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74937"
},
{
"cve": "CVE-2026-74938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74938"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74938",
"url": "https://www.suse.com/security/cve/CVE-2026-74938"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74938",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74938"
},
{
"cve": "CVE-2026-74947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74947"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74947",
"url": "https://www.suse.com/security/cve/CVE-2026-74947"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74947",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74947"
},
{
"cve": "CVE-2026-74950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74950"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74950",
"url": "https://www.suse.com/security/cve/CVE-2026-74950"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74950",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74950"
},
{
"cve": "CVE-2026-74952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74952"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 153.2, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74952",
"url": "https://www.suse.com/security/cve/CVE-2026-74952"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74952",
"url": "https://bugzilla.suse.com/1274867"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-74952",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74952"
},
{
"cve": "CVE-2026-74954",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74954"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74954",
"url": "https://www.suse.com/security/cve/CVE-2026-74954"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74954",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74954"
},
{
"cve": "CVE-2026-74955",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74955"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74955",
"url": "https://www.suse.com/security/cve/CVE-2026-74955"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74955",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74955"
},
{
"cve": "CVE-2026-74956",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74956"
}
],
"notes": [
{
"category": "general",
"text": "Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74956",
"url": "https://www.suse.com/security/cve/CVE-2026-74956"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74956",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74956"
},
{
"cve": "CVE-2026-74958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74958"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74958",
"url": "https://www.suse.com/security/cve/CVE-2026-74958"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74958",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74958"
},
{
"cve": "CVE-2026-74961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74961"
}
],
"notes": [
{
"category": "general",
"text": "Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74961",
"url": "https://www.suse.com/security/cve/CVE-2026-74961"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74961",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74961"
},
{
"cve": "CVE-2026-74966",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74966"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74966",
"url": "https://www.suse.com/security/cve/CVE-2026-74966"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74966",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74966"
},
{
"cve": "CVE-2026-74968",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74968"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74968",
"url": "https://www.suse.com/security/cve/CVE-2026-74968"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74968",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74968"
},
{
"cve": "CVE-2026-74970",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74970"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74970",
"url": "https://www.suse.com/security/cve/CVE-2026-74970"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74970",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74970"
},
{
"cve": "CVE-2026-74977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74977"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74977",
"url": "https://www.suse.com/security/cve/CVE-2026-74977"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74977",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74977"
},
{
"cve": "CVE-2026-74978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74978"
}
],
"notes": [
{
"category": "general",
"text": "Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74978",
"url": "https://www.suse.com/security/cve/CVE-2026-74978"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74978",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74978"
},
{
"cve": "CVE-2026-74979",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74979"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74979",
"url": "https://www.suse.com/security/cve/CVE-2026-74979"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74979",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74979"
},
{
"cve": "CVE-2026-74981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74981"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74981",
"url": "https://www.suse.com/security/cve/CVE-2026-74981"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74981",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74981"
},
{
"cve": "CVE-2026-74982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74982"
}
],
"notes": [
{
"category": "general",
"text": "Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74982",
"url": "https://www.suse.com/security/cve/CVE-2026-74982"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74982",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74982"
},
{
"cve": "CVE-2026-74984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74984"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74984",
"url": "https://www.suse.com/security/cve/CVE-2026-74984"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74984",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74984"
},
{
"cve": "CVE-2026-74985",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74985"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74985",
"url": "https://www.suse.com/security/cve/CVE-2026-74985"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74985",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74985"
},
{
"cve": "CVE-2026-74986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74986"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74986",
"url": "https://www.suse.com/security/cve/CVE-2026-74986"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74986",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74986"
},
{
"cve": "CVE-2026-74988",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-74988"
}
],
"notes": [
{
"category": "general",
"text": "Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-74988",
"url": "https://www.suse.com/security/cve/CVE-2026-74988"
},
{
"category": "external",
"summary": "SUSE Bug 1274867 for CVE-2026-74988",
"url": "https://bugzilla.suse.com/1274867"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-74988"
},
{
"cve": "CVE-2026-84118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84118"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84118",
"url": "https://www.suse.com/security/cve/CVE-2026-84118"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84118",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84118",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84118"
},
{
"cve": "CVE-2026-84123",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84123"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84123",
"url": "https://www.suse.com/security/cve/CVE-2026-84123"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84123",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84123",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84123"
},
{
"cve": "CVE-2026-84125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84125"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84125",
"url": "https://www.suse.com/security/cve/CVE-2026-84125"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84125",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84125",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84125"
},
{
"cve": "CVE-2026-84129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84129"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84129",
"url": "https://www.suse.com/security/cve/CVE-2026-84129"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84129",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84129",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84129"
},
{
"cve": "CVE-2026-84130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84130"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84130",
"url": "https://www.suse.com/security/cve/CVE-2026-84130"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84130",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84130",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84130"
},
{
"cve": "CVE-2026-84132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84132"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84132",
"url": "https://www.suse.com/security/cve/CVE-2026-84132"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84132",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84132",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84132"
},
{
"cve": "CVE-2026-84133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84133"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84133",
"url": "https://www.suse.com/security/cve/CVE-2026-84133"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84133",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84133",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84133"
},
{
"cve": "CVE-2026-84134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84134"
}
],
"notes": [
{
"category": "general",
"text": "Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84134",
"url": "https://www.suse.com/security/cve/CVE-2026-84134"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84134",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84134",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84134"
},
{
"cve": "CVE-2026-84136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84136"
}
],
"notes": [
{
"category": "general",
"text": "Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84136",
"url": "https://www.suse.com/security/cve/CVE-2026-84136"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84136",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84136",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84136"
},
{
"cve": "CVE-2026-84137",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84137"
}
],
"notes": [
{
"category": "general",
"text": "Spoofing issue in the DOM: Core \u0026 HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84137",
"url": "https://www.suse.com/security/cve/CVE-2026-84137"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84137",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84137",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84137"
},
{
"cve": "CVE-2026-84139",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84139"
}
],
"notes": [
{
"category": "general",
"text": "Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84139",
"url": "https://www.suse.com/security/cve/CVE-2026-84139"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84139",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84139",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84139"
},
{
"cve": "CVE-2026-84140",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84140"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84140",
"url": "https://www.suse.com/security/cve/CVE-2026-84140"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84140",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84140",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84140"
},
{
"cve": "CVE-2026-84141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84141"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84141",
"url": "https://www.suse.com/security/cve/CVE-2026-84141"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84141",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84141",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84141"
},
{
"cve": "CVE-2026-84144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84144"
}
],
"notes": [
{
"category": "general",
"text": "Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84144",
"url": "https://www.suse.com/security/cve/CVE-2026-84144"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84144",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84144",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84144"
},
{
"cve": "CVE-2026-84637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84637"
}
],
"notes": [
{
"category": "general",
"text": "Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird\u0027s normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This vulnerability was fixed in Thunderbird 154 and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84637",
"url": "https://www.suse.com/security/cve/CVE-2026-84637"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84637",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84637",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84637"
},
{
"cve": "CVE-2026-84642",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84642"
}
],
"notes": [
{
"category": "general",
"text": "The values of the mail.allowed_attachment_hostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This vulnerability was fixed in Thunderbird 155 and Thunderbird 153.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84642",
"url": "https://www.suse.com/security/cve/CVE-2026-84642"
},
{
"category": "external",
"summary": "SUSE Bug 1278001 for CVE-2026-84642",
"url": "https://bugzilla.suse.com/1278001"
},
{
"category": "external",
"summary": "SUSE Bug 1278034 for CVE-2026-84642",
"url": "https://bugzilla.suse.com/1278034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-84642"
},
{
"cve": "CVE-2026-92035",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92035"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbird 156, Thunderbird 153.3, Firefox ESR 115.42, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92035",
"url": "https://www.suse.com/security/cve/CVE-2026-92035"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92035",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92035"
},
{
"cve": "CVE-2026-92038",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92038"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92038",
"url": "https://www.suse.com/security/cve/CVE-2026-92038"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92038",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92038"
},
{
"cve": "CVE-2026-92039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92039"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92039",
"url": "https://www.suse.com/security/cve/CVE-2026-92039"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92039",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92039"
},
{
"cve": "CVE-2026-92041",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92041"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92041",
"url": "https://www.suse.com/security/cve/CVE-2026-92041"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92041",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92041"
},
{
"cve": "CVE-2026-92042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92042"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92042",
"url": "https://www.suse.com/security/cve/CVE-2026-92042"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92042",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92042"
},
{
"cve": "CVE-2026-92043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92043"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92043",
"url": "https://www.suse.com/security/cve/CVE-2026-92043"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92043",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92043"
},
{
"cve": "CVE-2026-92044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92044"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92044",
"url": "https://www.suse.com/security/cve/CVE-2026-92044"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92044",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92044"
},
{
"cve": "CVE-2026-92045",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92045"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92045",
"url": "https://www.suse.com/security/cve/CVE-2026-92045"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92045",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92045"
},
{
"cve": "CVE-2026-92046",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92046"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92046",
"url": "https://www.suse.com/security/cve/CVE-2026-92046"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92046",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92046"
},
{
"cve": "CVE-2026-92047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92047"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Crash Reporting component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92047",
"url": "https://www.suse.com/security/cve/CVE-2026-92047"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92047",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92047"
},
{
"cve": "CVE-2026-92048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92048"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92048",
"url": "https://www.suse.com/security/cve/CVE-2026-92048"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92048",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92048"
},
{
"cve": "CVE-2026-92049",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92049"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92049",
"url": "https://www.suse.com/security/cve/CVE-2026-92049"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92049",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92049"
},
{
"cve": "CVE-2026-92052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92052"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92052",
"url": "https://www.suse.com/security/cve/CVE-2026-92052"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92052",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92052"
},
{
"cve": "CVE-2026-92053",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92053"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92053",
"url": "https://www.suse.com/security/cve/CVE-2026-92053"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92053",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92053"
},
{
"cve": "CVE-2026-92054",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92054"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Memory component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92054",
"url": "https://www.suse.com/security/cve/CVE-2026-92054"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92054",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92054"
},
{
"cve": "CVE-2026-92055",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92055"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92055",
"url": "https://www.suse.com/security/cve/CVE-2026-92055"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92055",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92055"
},
{
"cve": "CVE-2026-92056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92056"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92056",
"url": "https://www.suse.com/security/cve/CVE-2026-92056"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92056",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92056"
},
{
"cve": "CVE-2026-92057",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92057"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92057",
"url": "https://www.suse.com/security/cve/CVE-2026-92057"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92057",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92057"
},
{
"cve": "CVE-2026-92058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92058"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92058",
"url": "https://www.suse.com/security/cve/CVE-2026-92058"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92058",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92058"
},
{
"cve": "CVE-2026-92059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92059"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92059",
"url": "https://www.suse.com/security/cve/CVE-2026-92059"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92059",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92059"
},
{
"cve": "CVE-2026-92060",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92060"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92060",
"url": "https://www.suse.com/security/cve/CVE-2026-92060"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92060",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92060"
},
{
"cve": "CVE-2026-92062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92062"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92062",
"url": "https://www.suse.com/security/cve/CVE-2026-92062"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92062",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92062"
},
{
"cve": "CVE-2026-92064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92064"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92064",
"url": "https://www.suse.com/security/cve/CVE-2026-92064"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92064",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92064"
},
{
"cve": "CVE-2026-92065",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92065"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92065",
"url": "https://www.suse.com/security/cve/CVE-2026-92065"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92065",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92065"
},
{
"cve": "CVE-2026-92067",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92067"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92067",
"url": "https://www.suse.com/security/cve/CVE-2026-92067"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92067",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92067"
},
{
"cve": "CVE-2026-92068",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92068"
}
],
"notes": [
{
"category": "general",
"text": "Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92068",
"url": "https://www.suse.com/security/cve/CVE-2026-92068"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92068",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92068"
},
{
"cve": "CVE-2026-92069",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92069"
}
],
"notes": [
{
"category": "general",
"text": "Spoofing issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92069",
"url": "https://www.suse.com/security/cve/CVE-2026-92069"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92069",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92069"
},
{
"cve": "CVE-2026-92070",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92070"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92070",
"url": "https://www.suse.com/security/cve/CVE-2026-92070"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92070",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92070"
},
{
"cve": "CVE-2026-92071",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92071"
}
],
"notes": [
{
"category": "general",
"text": "Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92071",
"url": "https://www.suse.com/security/cve/CVE-2026-92071"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92071",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92071"
},
{
"cve": "CVE-2026-92072",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92072"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Safe Browsing component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92072",
"url": "https://www.suse.com/security/cve/CVE-2026-92072"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92072",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92072"
},
{
"cve": "CVE-2026-92073",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92073"
}
],
"notes": [
{
"category": "general",
"text": "Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92073",
"url": "https://www.suse.com/security/cve/CVE-2026-92073"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92073",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92073"
},
{
"cve": "CVE-2026-92074",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92074"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92074",
"url": "https://www.suse.com/security/cve/CVE-2026-92074"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92074",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92074"
},
{
"cve": "CVE-2026-92075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92075"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92075",
"url": "https://www.suse.com/security/cve/CVE-2026-92075"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92075",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92075"
},
{
"cve": "CVE-2026-92076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92076"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92076",
"url": "https://www.suse.com/security/cve/CVE-2026-92076"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92076",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92076"
},
{
"cve": "CVE-2026-92077",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92077"
}
],
"notes": [
{
"category": "general",
"text": "Denial-of-service in the SVG component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92077",
"url": "https://www.suse.com/security/cve/CVE-2026-92077"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92077",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92077"
},
{
"cve": "CVE-2026-92078",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92078"
}
],
"notes": [
{
"category": "general",
"text": "Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92078",
"url": "https://www.suse.com/security/cve/CVE-2026-92078"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92078",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92078"
},
{
"cve": "CVE-2026-92079",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-92079"
}
],
"notes": [
{
"category": "general",
"text": "Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-92079",
"url": "https://www.suse.com/security/cve/CVE-2026-92079"
},
{
"category": "external",
"summary": "SUSE Bug 1280371 for CVE-2026-92079",
"url": "https://bugzilla.suse.com/1280371"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-92079"
},
{
"cve": "CVE-2026-96869",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-96869"
}
],
"notes": [
{
"category": "general",
"text": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-96869",
"url": "https://www.suse.com/security/cve/CVE-2026-96869"
},
{
"category": "external",
"summary": "SUSE Bug 1282929 for CVE-2026-96869",
"url": "https://bugzilla.suse.com/1282929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-common-0:153.4.0-1.1.x86_64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.aarch64",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.ppc64le",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.s390x",
"openSUSE Tumbleweed:MozillaThunderbird-translations-other-0:153.4.0-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-10T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2026-96869"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…