SUSE-SU-2026:1379-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2026/suse-su-20261379-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1379-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2026:1379-1

Upstream

CVE (3)

CVE-2026-5731
CVE-2026-5732
CVE-2026-5734

Related

CVE (3)

CVE-2026-5731
CVE-2026-5732
CVE-2026-5734

Published

2026-04-16T08:42:00Z

Modified

2026-04-17T09:00:21Z

Summary

Security update for MozillaThunderbird

Details

This update for MozillaThunderbird fixes the following issues:

Update to 149.0.2 and 140.9.1esr (bsc#1261663).
CVE-2026-5731: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2.
CVE-2026-5732: Incorrect boundary conditions, integer overflow in the Graphics: Text component.
CVE-2026-5734: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2.

References

Affected packages

SUSE:Linux Enterprise Module for Package Hub 15 SP7

MozillaThunderbird

Package

Name: MozillaThunderbird
Purl: pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

140.9.1-150200.8.266.1

Ecosystem specific

{
    "binaries":  [
        {
            "MozillaThunderbird":  "140.9.1-150200.8.266.1",
            "MozillaThunderbird-translations-common":  "140.9.1-150200.8.266.1",
            "MozillaThunderbird-translations-other":  "140.9.1-150200.8.266.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1379-1.json"

SUSE:Linux Enterprise Workstation Extension 15 SP7