SUSE-SU-2026:1741-1

Kaynağa göre önem derecesi

Hiçbir kaynak CVSS puanı vermiyor.

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.

Açıklama

This update for MozillaThunderbird fixes the following issues Updated to Mozilla Thunderbird 140.10.1: MFSA 2026-34 (bsc#1262230): - CVE-2026-6746: Use-after-free in the DOM: Core & HTML component. - CVE-2026-6747: Use-after-free in the WebRTC component. - CVE-2026-6748: Uninitialized memory in the Audio/Video: Web Codecs component. - CVE-2026-6749: Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. - CVE-2026-6750: Privilege escalation in the Graphics: WebRender component. - CVE-2026-6751: Uninitialized memory in the Audio/Video: Web Codecs component. - CVE-2026-6752: Incorrect boundary conditions in the WebRTC component. - CVE-2026-6753: Incorrect boundary conditions in the WebRTC component. - CVE-2026-6754: Use-after-free in the JavaScript Engine component. - CVE-2026-6757: Invalid pointer in the JavaScript: WebAssembly component. - CVE-2026-6759: Use-after-free in the Widget: Cocoa component. - CVE-2026-6761: Privilege escalation in the Networking component. - CVE-2026-6762: Spoofing issue in the DOM: Core & HTML component. - CVE-2026-6763: Mitigation bypass in the File Handling component. - CVE-2026-6764: Incorrect boundary conditions in the DOM: Device Interfaces component. - CVE-2026-6765: Information disclosure in the Form Autofill component. - CVE-2026-6766: Incorrect boundary conditions in the Libraries component in NSS. - CVE-2026-6767: Other issue in the Libraries component in NSS. - CVE-2026-6769: Privilege escalation in the Debugger component. - CVE-2026-6770: Other issue in the Storage: IndexedDB component. - CVE-2026-6771: Mitigation bypass in the DOM: Security component. - CVE-2026-6772: Incorrect boundary conditions in the Libraries component in NSS. - CVE-2026-6776: Incorrect boundary conditions in the WebRTC: Networking component. - CVE-2026-6785: Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150. - CVE-2026-6786: Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150. MFSA 2026-39 (bsc#1263110): - CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component. - CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. - CVE-2026-7322: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. - CVE-2026-7323: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. Other updates and bugfixes: - Fixed: Newly translated strings were not available in Thunderbird.

Etkilenen paketler ve düzeltilmiş sürümler

Referanslar

• https://bugzilla.suse.com/1262230
• https://bugzilla.suse.com/1263110
• https://lists.suse.com/pipermail/sle-updates/2026-May/046300.html
• https://www.suse.com/security/cve/CVE-2026-6746/
• https://www.suse.com/security/cve/CVE-2026-6747/
• https://www.suse.com/security/cve/CVE-2026-6748/
• https://www.suse.com/security/cve/CVE-2026-6749/
• https://www.suse.com/security/cve/CVE-2026-6750/