CLSA-2026-1779786876

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1779786876.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1779786876
Upstream
CVE (4)
Published
2026-05-26T09:14:39Z
Modified
2026-10-26T09:30:03Z
Summary
thunderbird: Fix of 4 CVEs
Details
  • CVE-2023-5388: NSS MPI RSA decryption timing side-channel (Marvin attack); backport upstream NSS_3_90 commit 196716d8 to security/nss/lib/freebl
  • CVE-2024-0741: ANGLE VariablePacker int32 overflow leading to heap out-of-bounds write in WebGL shader compilation
  • CVE-2024-0753: PSM HSTS superdomain walk did not honor ancestor includeSubDomains policy (RFC 6797 conformance)
  • CVE-2025-3523: attachment URL UI misrepresentation in displayAttachmentsForExpandedViewExternal; mouseover/focus showed last URL for all rows
References

Affected packages

TuxCare:AlmaLinux:9.2 / thunderbird

Package

Name
thunderbird
Purl
pkg:rpm/tuxcare/thunderbird?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
115.4.1-1.el9_2.alma.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1779786876.json"