Advisories ยป MGASA-2026-0492

Updated thunderbird packages fix security vulnerabilities

Publication date: 12 Oct 2026
Modification date: 12 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-103500 , CVE-2026-96869 , CVE-2026-100756 , CVE-2026-100757 , CVE-2026-100758 , CVE-2026-100759 , CVE-2026-100760 , CVE-2026-100762 , CVE-2026-100765 , CVE-2026-100766 , CVE-2026-100767 , CVE-2026-100769 , CVE-2026-100770 , CVE-2026-100771 , CVE-2026-100772 , CVE-2026-100773 , CVE-2026-100774 , CVE-2026-100775 , CVE-2026-100776 , CVE-2026-100777 , CVE-2026-100778 , CVE-2026-100779 , CVE-2026-100780 , CVE-2026-100781 , CVE-2026-100782 , CVE-2026-100783 , CVE-2026-100784 , CVE-2026-100785 , CVE-2026-100786 , CVE-2026-100787 , CVE-2026-100788 , CVE-2026-100789 , CVE-2026-100790 , CVE-2026-100791 , CVE-2026-100792 , CVE-2026-100794 , CVE-2026-100797 , CVE-2026-100798 , CVE-2026-100800 , CVE-2026-100801 , CVE-2026-100803 , CVE-2026-100806 , CVE-2026-100807 , CVE-2026-100808 , CVE-2026-100809 , CVE-2026-100811 , CVE-2026-100812 , CVE-2026-100814 , CVE-2026-100815 , CVE-2026-100816 , CVE-2026-100818 , CVE-2026-100819 , CVE-2026-100820 , CVE-2026-100821 , CVE-2026-100822 , CVE-2026-100824 , CVE-2026-100825 , CVE-2026-100826 , CVE-2026-100828 , CVE-2026-100829 , CVE-2026-100830 , CVE-2026-100831 , CVE-2026-100832

Description

Heap buffer overflow opening large email. (CVE-2026-103500)
Incorrect boundary conditions in the Audio/Video: Playback component.
(CVE-2026-100756)
Use-after-free in the Widget component. (CVE-2026-100757)
Sandbox escape in the DOM: Navigation component. (CVE-2026-100758)
Uninitialized memory in the Storage: Quota Manager component.
(CVE-2026-100759)
Sandbox escape in the Security: Process Sandboxing component.
(CVE-2026-100760)
Sandbox escape due to use-after-free in the DOM: Content Processes
component. (CVE-2026-100762)
Use-after-free in the JavaScript: WebAssembly component.
(CVE-2026-100765)
Information disclosure in the Networking: JAR component.
(CVE-2026-100766)
Use-after-free in the Networking: Cache component. (CVE-2026-100767)
Use-after-free in the JavaScript: WebAssembly component.
(CVE-2026-100769)
Sandbox escape due to use-after-free in the DOM: Content Processes
component. (CVE-2026-100770)
Undefined behavior in the DOM: Streams component. (CVE-2026-100771)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-100772)
Use-after-free in the Storage: IndexedDB component. (CVE-2026-100773)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-100774)
Sandbox escape in the Graphics component. (CVE-2026-100775)
Use-after-free in the JavaScript: WebAssembly component.
(CVE-2026-100776)
Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100777)
Sandbox escape due to use-after-free in the DOM: Core & HTML component.
(CVE-2026-100778)
Use-after-free in the XSLT component. (CVE-2026-100779)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-100780)
Sandbox escape due to incorrect boundary conditions in the Graphics:
WebRender component. (CVE-2026-100781)
Privilege escalation due to incorrect boundary conditions in the
Graphics component. (CVE-2026-100782)
Uninitialized memory in the Audio/Video component. (CVE-2026-100783)
Use-after-free in the Layout: Text and Fonts component.
(CVE-2026-100784)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-100785)
Sandbox escape due to use-after-free in the Graphics component.
(CVE-2026-100786)
Sandbox escape in the XUL component. (CVE-2026-100787)
Invalid pointer in the JavaScript: WebAssembly component.
(CVE-2026-100788)
Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100789)
Use-after-free in the XSLT component. (CVE-2026-100790)
Use-after-free in the DOM: Core & HTML component. (CVE-2026-100791)
Use-after-free in the Graphics: Canvas2D component. (CVE-2026-100832)
JIT miscompilation in the JavaScript: WebAssembly component.
(CVE-2026-100792)
Sandbox escape due to incorrect boundary conditions in the
Internationalization component. (CVE-2026-100794)
Information disclosure in the Networking component. (CVE-2026-96869)
Privilege escalation due to use-after-free in the Graphics: WebRender
component. (CVE-2026-100797)
Cryptography misuse in Storage: Quota Manager component.
(CVE-2026-100798)
Sandbox escape due to use-after-free in the Disability Access APIs
component. (CVE-2026-100800)
Privilege escalation in the DLL Services component. (CVE-2026-100801)
Same-origin policy bypass in the WebExtensions component.
(CVE-2026-100803)
Uninitialized memory in the Graphics: WebGPU component.
(CVE-2026-100806)
Privilege escalation in the DOM: Service Workers component.
(CVE-2026-100807)
Mitigation bypass in the DOM: Service Workers component.
(CVE-2026-100808)
Same-origin policy bypass in the DevTools component. (CVE-2026-100809)
Sandbox escape due to use-after-free in the DOM: Core & HTML component.
(CVE-2026-100811)
Denial-of-service in the Graphics component. (CVE-2026-100812)
Incorrect boundary conditions in the JavaScript Engine: JIT component.
(CVE-2026-100814)
Use-after-free in the CSS Parsing and Computation component.
(CVE-2026-100815)
Site isolation issue in the DOM: Networking component. (CVE-2026-100816)
Sandbox escape due to use-after-free in the Widget: Gtk component.
(CVE-2026-100818)
Sandbox escape due to incorrect boundary conditions in the XPCOM
component. (CVE-2026-100819)
Privilege escalation in the Address Bar component. (CVE-2026-100820)
Site isolation issue in the Panning and Zooming component.
(CVE-2026-100821)
Spoofing issue in the Networking: HTTP component. (CVE-2026-100822)
Privilege escalation in the Places component. (CVE-2026-100824)
Use-after-free in the JavaScript Engine: JIT component.
(CVE-2026-100825)
Denial-of-service in the Storage: StorageManager component.
(CVE-2026-100826)
Mitigation bypass in the Bookmarks & History component.
(CVE-2026-100828)
Mitigation bypass in the DOM: Security component. (CVE-2026-100829)
Mitigation bypass in the DOM: Navigation component. (CVE-2026-100830)
Use-after-free in the DOM: UI Events & Focus Handling component.
(CVE-2026-100831)

References

SRPMS

10/core