Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:90895

Опубликовано: 29 окт. 2026
Источник: rocky
Оценка: Important

Описание

Important: thunderbird security, bug fix, and enhancement update

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • libexpat: denial of service via crafted XML input (CVE-2026-45186)

Bug Fix(es) and Enhancement(s):

  • Thunderbird ESR 153 rebase [rhel-10.2.z] (JIRA:Rocky Linux-175207)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 10

НаименованиеАрхитектураРелизRPM
thunderbirdaarch641.el10_2thunderbird-153.5.0-1.el10_2.aarch64.rpm
thunderbirdx86_641.el10_2thunderbird-153.5.0-1.el10_2.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 7.5
ubuntu
6 месяцев назад

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

CVSS3: 7.5
redhat
6 месяцев назад

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

CVSS3: 7.5
nvd
6 месяцев назад

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

CVSS3: 2.9
msrc
6 месяцев назад

In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.

CVSS3: 7.5
debian
6 месяцев назад

In libexpat before 2.8.1, the computational complexity of attribute na ...