Most recent entries from all

ALSA-2024:0001 — Important: thunderbird security update

2026-10-04T02:22:20.769150+00:00

Affected: AlmaLinux:9: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 115.6.0.

Security Fix(es):

* Mozilla: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver (CVE-2023-6856) * Mozilla: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6 (CVE-2023-6864) * Mozilla: S/MIME signature accepted despite mismatching message date (CVE-2023-50761) * Mozilla: Truncated signed text was shown with a valid OpenPGP signature (CVE-2023-50762) * Mozilla: Symlinks may resolve to smaller than expected buffers (CVE-2023-6857) * Mozilla: Heap buffer overflow in nsTextFragment (CVE-2023-6858) * Mozilla: Use-after-free in PR_GetIdentitiesLayer (CVE-2023-6859) * Mozilla: Potential sandbox escape due to VideoBridge lack of texture validation (CVE-2023-6860) * Mozilla: Heap buffer overflow affected nsWindow::PickerOpen(void) in headless mode (CVE-2023-6861) * Mozilla: Use-after-free in nsDNSService (CVE-2023-6862) * Mozilla: Undefined behavior in ShutdownObserver() (CVE-2023-6863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-09115

2026-10-04T02:22:20.769228+00:00

bdu:2023-09115

certfr-2023-avi-1048 — De multiples vulnérabilités ont été découvertes dans les produits Mozilla. Elles permettent…

2026-10-04T02:22:20.769246+00:00

certfr-2023-avi-1048

EUVD-2026-238344

2026-10-04T02:22:20.769263+00:00

EUVD-2026-238344

fkie_cve-2023-6858

2026-10-04T02:22:20.769274+00:00

Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

GHSA-cm9x-r8m9-x222

2026-10-04T02:22:20.769296+00:00

Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

gsd-2023-6858

2026-10-04T02:22:20.769310+00:00

gsd-2023-6858

msrc_CVE-2023-6858 — Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerabil…

2026-10-04T02:22:20.769320+00:00

msrc_CVE-2023-6858

OESA-2025-1322 — firefox security update

2026-10-04T02:22:20.769337+00:00

Affected: openEuler:22.03-LTS-SP3: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global moz_debug_prefix /lib/debug %global moz_debug_dir /lib/debug/ %global uname_m %(uname -m) %global symbols_file_name -.en-US.-%(uname.crashreporter-symbols.zip %global symbols_file_path /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip %global _find_debuginfo_opts -p /lib/debug//-.en-US.-%(uname.crashreporter-symbols.zip -o debugcrashreporter.list %global crashreporter_pkg_name mozilla-crashreporter--debuginfo Security Fix(es):

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121.(CVE-2023-6135)

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.(CVE-2023-6207)

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard. *This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.(CVE-2023-6208)

Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host…

openSUSE-SU-2024:13519-1 — MozillaThunderbird-115.6.0-1.1 on GA media

2026-10-04T02:22:20.769410+00:00

MozillaThunderbird-115.6.0-1.1 on GA media

RHSA-2024:0002 — Red Hat Security Advisory: thunderbird security update

2026-10-04T02:22:20.769434+00:00

Mozilla: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver Mozilla: Symlinks may resolve to smaller than expected buffers Mozilla: Heap buffer overflow in nsTextFragment Mozilla: Use-after-free in PR_GetIdentitiesLayer Mozilla: Potential sandbox escape due to VideoBridge lack of texture validation Mozilla: Heap buffer overflow affected nsWindow::PickerOpen(void) in headless mode Mozilla: Use-after-free in nsDNSService Mozilla: Undefined behavior in ShutdownObserver() Mozilla: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6 Mozilla: S/MIME signature accepted despite mismatching message date Mozilla: Truncated signed text was shown with a valid OpenPGP signature

SUSE-SU-2023:4912-1 — Security update for MozillaFirefox

2026-10-04T02:22:20.769470+00:00

Security update for MozillaFirefox

UBUNTU-CVE-2023-6858

2026-10-04T02:22:20.769493+00:00

Affected: Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: thunderbird, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78, Ubuntu:22.04:LTS: mozjs91, Ubuntu:22.04:LTS: thunderbird and 2 more

Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

WID-SEC-W-2023-3185 — Mozilla Firefox und Thunderbird: Mehrere Schwachstellen

2026-10-04T02:22:20.769528+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Firefox ESR und Thunderbird ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen und undefiniertes Verhalten zu verursachen.