Описание
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue:
Triggering an error condition in certain MIME bodies would cause uninitialized
memory to be used.
Отчет
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | rhel10/thunderbird-flatpak | Affected | ||
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | ||
| Red Hat Enterprise Linux 7 | thunderbird | Out of support scope | ||
| Red Hat Enterprise Linux 10 | thunderbird | Fixed | RHSA-2026:73130 | 29.09.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | thunderbird | Fixed | RHSA-2026:77631 | 08.10.2026 |
| Red Hat Enterprise Linux 8 | thunderbird | Fixed | RHSA-2026:73971 | 30.09.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | thunderbird | Fixed | RHSA-2026:82122 | 13.10.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | thunderbird | Fixed | RHSA-2026:82122 | 13.10.2026 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | thunderbird | Fixed | RHSA-2026:81913 | 13.10.2026 |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | thunderbird | Fixed | RHSA-2026:81913 | 13.10.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
Triggering an error condition in certain MIME bodies would cause unini ...
Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
ALT-PU-2026-14614: package `thunderbird` update to version 155.0-alt1
EPSS
7.5 High
CVSS3