RHSA-2026:3981
- Source
- https://access.redhat.com/errata/RHSA-2026:3981
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2026:3981.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2026:3981
- Upstream
- Published
- 2026-03-09T10:08:21Z
- Modified
- 2026-03-10T10:08:33Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: thunderbird security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2026:3981
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2440219
- https://bugzilla.redhat.com/show_bug.cgi?id=2442284
- https://bugzilla.redhat.com/show_bug.cgi?id=2442287
- https://bugzilla.redhat.com/show_bug.cgi?id=2442288
- https://bugzilla.redhat.com/show_bug.cgi?id=2442290
- https://bugzilla.redhat.com/show_bug.cgi?id=2442291
- https://bugzilla.redhat.com/show_bug.cgi?id=2442292
- https://bugzilla.redhat.com/show_bug.cgi?id=2442294
- https://bugzilla.redhat.com/show_bug.cgi?id=2442295
- https://bugzilla.redhat.com/show_bug.cgi?id=2442297
- https://bugzilla.redhat.com/show_bug.cgi?id=2442298
- https://bugzilla.redhat.com/show_bug.cgi?id=2442300
- https://bugzilla.redhat.com/show_bug.cgi?id=2442302
- https://bugzilla.redhat.com/show_bug.cgi?id=2442304
- https://bugzilla.redhat.com/show_bug.cgi?id=2442307
- https://bugzilla.redhat.com/show_bug.cgi?id=2442308
- https://bugzilla.redhat.com/show_bug.cgi?id=2442309
- https://bugzilla.redhat.com/show_bug.cgi?id=2442312
- https://bugzilla.redhat.com/show_bug.cgi?id=2442313
- https://bugzilla.redhat.com/show_bug.cgi?id=2442314
- https://bugzilla.redhat.com/show_bug.cgi?id=2442316
- https://bugzilla.redhat.com/show_bug.cgi?id=2442318
- https://bugzilla.redhat.com/show_bug.cgi?id=2442319
- https://bugzilla.redhat.com/show_bug.cgi?id=2442320
- https://bugzilla.redhat.com/show_bug.cgi?id=2442322
- https://bugzilla.redhat.com/show_bug.cgi?id=2442324
- https://bugzilla.redhat.com/show_bug.cgi?id=2442325
- https://bugzilla.redhat.com/show_bug.cgi?id=2442326
- https://bugzilla.redhat.com/show_bug.cgi?id=2442327
- https://bugzilla.redhat.com/show_bug.cgi?id=2442328
- https://bugzilla.redhat.com/show_bug.cgi?id=2442329
- https://bugzilla.redhat.com/show_bug.cgi?id=2442331
- https://bugzilla.redhat.com/show_bug.cgi?id=2442333
- https://bugzilla.redhat.com/show_bug.cgi?id=2442334
- https://bugzilla.redhat.com/show_bug.cgi?id=2442335
- https://bugzilla.redhat.com/show_bug.cgi?id=2442337
- https://bugzilla.redhat.com/show_bug.cgi?id=2442342
- https://bugzilla.redhat.com/show_bug.cgi?id=2442343
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3981.json
- https://access.redhat.com/security/cve/CVE-2026-2447
- https://www.cve.org/CVERecord?id=CVE-2026-2447
- https://nvd.nist.gov/vuln/detail/CVE-2026-2447
- https://bugzilla.mozilla.org/show_bug.cgi?id=2014390
- https://www.mozilla.org/security/advisories/mfsa2026-10/
- https://access.redhat.com/security/cve/CVE-2026-2757
- https://www.cve.org/CVERecord?id=CVE-2026-2757
- https://nvd.nist.gov/vuln/detail/CVE-2026-2757
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2757
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2757
- https://access.redhat.com/security/cve/CVE-2026-2758
- https://www.cve.org/CVERecord?id=CVE-2026-2758
- https://nvd.nist.gov/vuln/detail/CVE-2026-2758
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2758
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2758
- https://access.redhat.com/security/cve/CVE-2026-2759
- https://www.cve.org/CVERecord?id=CVE-2026-2759
- https://nvd.nist.gov/vuln/detail/CVE-2026-2759
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2759
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2759
- https://access.redhat.com/security/cve/CVE-2026-2760
- https://www.cve.org/CVERecord?id=CVE-2026-2760
- https://nvd.nist.gov/vuln/detail/CVE-2026-2760
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2760
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2760
- https://access.redhat.com/security/cve/CVE-2026-2761
- https://www.cve.org/CVERecord?id=CVE-2026-2761
- https://nvd.nist.gov/vuln/detail/CVE-2026-2761
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2761
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2761
- https://access.redhat.com/security/cve/CVE-2026-2762
- https://www.cve.org/CVERecord?id=CVE-2026-2762
- https://nvd.nist.gov/vuln/detail/CVE-2026-2762
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2762
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2762
- https://access.redhat.com/security/cve/CVE-2026-2763
- https://www.cve.org/CVERecord?id=CVE-2026-2763
- https://nvd.nist.gov/vuln/detail/CVE-2026-2763
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2763
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2763
- https://access.redhat.com/security/cve/CVE-2026-2764
- https://www.cve.org/CVERecord?id=CVE-2026-2764
- https://nvd.nist.gov/vuln/detail/CVE-2026-2764
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2764
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2764
- https://access.redhat.com/security/cve/CVE-2026-2765
- https://www.cve.org/CVERecord?id=CVE-2026-2765
- https://nvd.nist.gov/vuln/detail/CVE-2026-2765
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2765
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2765
- https://access.redhat.com/security/cve/CVE-2026-2766
- https://www.cve.org/CVERecord?id=CVE-2026-2766
- https://nvd.nist.gov/vuln/detail/CVE-2026-2766
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2766
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2766
- https://access.redhat.com/security/cve/CVE-2026-2767
- https://www.cve.org/CVERecord?id=CVE-2026-2767
- https://nvd.nist.gov/vuln/detail/CVE-2026-2767
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2767
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2767
- https://access.redhat.com/security/cve/CVE-2026-2768
- https://www.cve.org/CVERecord?id=CVE-2026-2768
- https://nvd.nist.gov/vuln/detail/CVE-2026-2768
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2768
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2768
- https://access.redhat.com/security/cve/CVE-2026-2769
- https://www.cve.org/CVERecord?id=CVE-2026-2769
- https://nvd.nist.gov/vuln/detail/CVE-2026-2769
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2769
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2769
- https://access.redhat.com/security/cve/CVE-2026-2770
- https://www.cve.org/CVERecord?id=CVE-2026-2770
- https://nvd.nist.gov/vuln/detail/CVE-2026-2770
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2770
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2770
- https://access.redhat.com/security/cve/CVE-2026-2771
- https://www.cve.org/CVERecord?id=CVE-2026-2771
- https://nvd.nist.gov/vuln/detail/CVE-2026-2771
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2771
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2771
- https://access.redhat.com/security/cve/CVE-2026-2772
- https://www.cve.org/CVERecord?id=CVE-2026-2772
- https://nvd.nist.gov/vuln/detail/CVE-2026-2772
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2772
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2772
- https://access.redhat.com/security/cve/CVE-2026-2773
- https://www.cve.org/CVERecord?id=CVE-2026-2773
- https://nvd.nist.gov/vuln/detail/CVE-2026-2773
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2773
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2773
- https://access.redhat.com/security/cve/CVE-2026-2774
- https://www.cve.org/CVERecord?id=CVE-2026-2774
- https://nvd.nist.gov/vuln/detail/CVE-2026-2774
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2774
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2774
- https://access.redhat.com/security/cve/CVE-2026-2775
- https://www.cve.org/CVERecord?id=CVE-2026-2775
- https://nvd.nist.gov/vuln/detail/CVE-2026-2775
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2775
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2775
- https://access.redhat.com/security/cve/CVE-2026-2776
- https://www.cve.org/CVERecord?id=CVE-2026-2776
- https://nvd.nist.gov/vuln/detail/CVE-2026-2776
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2776
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2776
- https://access.redhat.com/security/cve/CVE-2026-2777
- https://www.cve.org/CVERecord?id=CVE-2026-2777
- https://nvd.nist.gov/vuln/detail/CVE-2026-2777
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2777
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2777
- https://access.redhat.com/security/cve/CVE-2026-2778
- https://www.cve.org/CVERecord?id=CVE-2026-2778
- https://nvd.nist.gov/vuln/detail/CVE-2026-2778
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2778
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2778
- https://access.redhat.com/security/cve/CVE-2026-2779
- https://www.cve.org/CVERecord?id=CVE-2026-2779
- https://nvd.nist.gov/vuln/detail/CVE-2026-2779
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2779
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2779
- https://access.redhat.com/security/cve/CVE-2026-2780
- https://www.cve.org/CVERecord?id=CVE-2026-2780
- https://nvd.nist.gov/vuln/detail/CVE-2026-2780
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2780
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2780
- https://access.redhat.com/security/cve/CVE-2026-2781
- https://www.cve.org/CVERecord?id=CVE-2026-2781
- https://nvd.nist.gov/vuln/detail/CVE-2026-2781
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2781
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2781
- https://access.redhat.com/security/cve/CVE-2026-2782
- https://www.cve.org/CVERecord?id=CVE-2026-2782
- https://nvd.nist.gov/vuln/detail/CVE-2026-2782
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2782
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2782
- https://access.redhat.com/security/cve/CVE-2026-2783
- https://www.cve.org/CVERecord?id=CVE-2026-2783
- https://nvd.nist.gov/vuln/detail/CVE-2026-2783
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2783
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2783
- https://access.redhat.com/security/cve/CVE-2026-2784
- https://www.cve.org/CVERecord?id=CVE-2026-2784
- https://nvd.nist.gov/vuln/detail/CVE-2026-2784
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2784
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2784
- https://access.redhat.com/security/cve/CVE-2026-2785
- https://www.cve.org/CVERecord?id=CVE-2026-2785
- https://nvd.nist.gov/vuln/detail/CVE-2026-2785
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2785
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2785
- https://access.redhat.com/security/cve/CVE-2026-2786
- https://www.cve.org/CVERecord?id=CVE-2026-2786
- https://nvd.nist.gov/vuln/detail/CVE-2026-2786
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2786
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2786
- https://access.redhat.com/security/cve/CVE-2026-2787
- https://www.cve.org/CVERecord?id=CVE-2026-2787
- https://nvd.nist.gov/vuln/detail/CVE-2026-2787
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2787
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2787
- https://access.redhat.com/security/cve/CVE-2026-2788
- https://www.cve.org/CVERecord?id=CVE-2026-2788
- https://nvd.nist.gov/vuln/detail/CVE-2026-2788
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2788
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2788
- https://access.redhat.com/security/cve/CVE-2026-2789
- https://www.cve.org/CVERecord?id=CVE-2026-2789
- https://nvd.nist.gov/vuln/detail/CVE-2026-2789
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2789
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2789
- https://access.redhat.com/security/cve/CVE-2026-2790
- https://www.cve.org/CVERecord?id=CVE-2026-2790
- https://nvd.nist.gov/vuln/detail/CVE-2026-2790
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2790
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2790
- https://access.redhat.com/security/cve/CVE-2026-2791
- https://www.cve.org/CVERecord?id=CVE-2026-2791
- https://nvd.nist.gov/vuln/detail/CVE-2026-2791
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2791
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2791
- https://access.redhat.com/security/cve/CVE-2026-2792
- https://www.cve.org/CVERecord?id=CVE-2026-2792
- https://nvd.nist.gov/vuln/detail/CVE-2026-2792
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2792
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2792
- https://access.redhat.com/security/cve/CVE-2026-2793
- https://www.cve.org/CVERecord?id=CVE-2026-2793
- https://nvd.nist.gov/vuln/detail/CVE-2026-2793
- https://www.mozilla.org/security/advisories/mfsa2026-15/#CVE-2026-2793
- https://www.mozilla.org/security/advisories/mfsa2026-17/#CVE-2026-2793
Affected packages
Red Hat:rhel_eus:9.4::appstream / thunderbird
Package
- Name
- thunderbird
- Purl
- pkg:rpm/redhat/thunderbird
Red Hat:rhel_eus:9.4::appstream / thunderbird-debuginfo
Package
- Name
- thunderbird-debuginfo
- Purl
- pkg:rpm/redhat/thunderbird-debuginfo