{
  "document": {
    "aggregate_severity": {
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      },
      {
        "category": "details",
        "text": "rebase from Thunderbird 115.4.1 to 140.12.0 ESR\n\n- CVE-2022-3032: When receiving an HTML email that contained an iframe\n  element, which used a srcdoc attribute to define the inner HTML document,\n  remote objects specified in the nested document, for example images or\n  videos, were not blocked\n\n- CVE-2023-0430: Certificate OCSP revocation status was not checked when\n  verifying S/Mime signatures\n\n- CVE-2023-0547: OCSP revocation status of recipient certificates was not\n  checked when sending S/Mime encrypted email, and revoked certificates\n  would be accepted\n\n- CVE-2023-0616: If a MIME email combines OpenPGP and OpenPGP MIME data in a\n  certain way Thunderbird repeatedly attempts to process and display the\n  message, which could cause Thunderbird's user interface to lock up and no\n  longer respond to the user's actions\n\n- CVE-2023-1945: Unexpected data returned from the Safe Browsing API could\n  have led to memory corruption and a potentially exploitable crash\n\n- CVE-2023-4573: When receiving rendering data over IPC `mStream` could have\n  been destroyed when initialized, which could have led to a use-after-free\n  causing a potentially exploitable crash\n\n- CVE-2023-4574: When creating a callback over IPC for showing the Color\n  Picker window, multiple of the same callbacks could have been created at a\n  time and eventually all simultaneously destroyed as soon as one of the\n  callbacks finished\n\n- CVE-2023-4575: When creating a callback over IPC for showing the File\n  Picker window, multiple of the same callbacks could have been created at a\n  time and eventually all simultaneously destroyed as soon as one of the\n  callbacks finished\n\n- CVE-2023-4577: When `UpdateRegExpStatics` attempted to access\n  `initialStringHeap` it could already have been garbage collected prior to\n  entering the function, which could potentially have led to an exploitable\n  crash\n\n- CVE-2023-4578: When calling `JS::CheckRegExpSyntax` a Syntax Error could\n  have been set which would end in calling `convertToRuntimeErrorAndClear`.\n  A path in the function could attempt to allocate memory when none is\n  available which would have caused a newly created Out of Memory exception\n  to be mishandled as a Syntax Error\n\n- CVE-2023-4580: Push notifications stored on disk in private browsing mode\n  were not being encrypted potentially allowing the leak of sensitive\n  information\n\n- CVE-2023-4581: Excel `.xll` add-in files did not have a blocklist entry in\n  Firefox's executable blocklist which allowed them to be downloaded without\n  any warning of their potential harm\n\n- CVE-2023-5169: A compromised content process could have provided malicious\n  data in a `PathRecording` resulting in an out-of-bounds write, leading to\n  a potentially exploitable crash in a privileged process\n\n- CVE-2023-5171: During Ion compilation, a Garbage Collection could have\n  resulted in a use-after-free condition, allowing an attacker to write two\n  NUL bytes, and cause a potentially exploitable crash\n\n- CVE-2023-5724: Drivers are not always robust to extremely large draw calls\n  and in some cases this scenario could have led to a crash\n\n- CVE-2023-5725: A malicious installed WebExtension could open arbitrary\n  URLs, which under the right circumstance could be leveraged to collect\n  sensitive user data\n\n- CVE-2023-5732: An attacker could have created a malicious link using\n  bidirectional characters to spoof the location in the address bar when\n  visited\n\n- CVE-2023-6204: On some systems—depending on the graphics settings and\n  drivers—it was possible to force an out-of-bounds read and leak memory\n  data into the images created on the canvas element\n\n- CVE-2023-6205: It was possible to cause the use of a MessagePort after it\n  had already been freed, which could potentially have led to an exploitable\n  crash\n\n- CVE-2023-6206: The black fade animation when exiting fullscreen is roughly\n  the length of the anti-clickjacking delay on permission prompts\n\n- CVE-2023-6207: Ownership mismanagement led to a use-after-free in\n  ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR\n  < 115.5.0, and Thunderbird < 115.5\n\n- CVE-2023-6208: When using X11, text selected by the page using the\n  Selection API was erroneously copied into the primary selection, a\n  temporary storage not unlike the clipboard\n\n- CVE-2023-6209: Relative URLs starting with three slashes were incorrectly\n  parsed, and a path-traversal \"/../\" part in the path could be used to\n  override the specified host\n\n- CVE-2023-6212: Memory safety bugs present in Firefox 119, Firefox ESR\n  115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort some of these could have\n  been exploited to run arbitrary code\n\n- CVE-2023-6856: The WebGL `DrawElementsInstanced` method was susceptible to\n  a heap buffer overflow when used on systems with the Mesa VM driver\n\n- CVE-2023-6857: When resolving a symlink, a race may occur where the buffer\n  passed to `readlink` may actually be smaller than necessary\n\n- CVE-2023-6859: A use-after-free condition affected TLS socket creation\n  when under memory pressure\n\n- CVE-2023-6860: The `VideoBridge` allowed any content process to use\n  textures produced by remote decoders\n\n- CVE-2023-6862: A use-after-free was identified in the\n  `nsDNSService::Init`. This issue appears to manifest rarely during start-\n  up\n\n- CVE-2023-6863: The `ShutdownObserver()` was susceptible to potentially\n  undefined behavior due to its reliance on a dynamic type that lacked a\n  virtual destructor\n\n- CVE-2023-6864: Memory safety bugs present in Firefox 120, Firefox ESR\n  115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort some of these could have\n  been exploited to run arbitrary code\n\n- CVE-2023-23598: Due to the Firefox GTK wrapper code's use of text/plain\n  for drag data and GTK treating all text/plain MIMEs containing file URLs\n  as being dragged a website could arbitrarily read a file via a call to\n  `DataTransfer.setData`. This vulnerability affects Firefox < 109, Firefox\n  ESR < 102.7, and Thunderbird < 102.7\n\n- CVE-2023-23599: When copying a network request from the developer tools\n  panel as a curl command the output was not being properly sanitized and\n  could allow arbitrary commands to be hidden within\n\n- CVE-2023-23601: Navigations were being allowed when dragging a URL from a\n  cross-origin iframe into the same tab which could lead to website spoofing\n  attacks This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and\n  Thunderbird < 102.7\n\n- CVE-2023-23602: A mishandled security check when creating a WebSocket in a\n  WebWorker caused the Content Security Policy connect-src header to be\n  ignored\n\n- CVE-2023-25728: The Content-Security-Policy-Report-Only header could allow\n  an attacker to leak a child iframe's unredacted URI when interaction with\n  that iframe triggers a redirect\n\n- CVE-2023-25730: A background script invoking requestFullscreen and then\n  blocking the main thread could force the browser into fullscreen mode\n  indefinitely, resulting in potential user confusion or spoofing attacks\n\n- CVE-2023-25737: An invalid downcast from nsTextNode to SVGElement could\n  have lead to undefined behavior\n\n- CVE-2023-25742: When importing a SPKI RSA public key as ECDSA P-256, the\n  key would be handled incorrectly causing the tab to crash\n\n- CVE-2023-25751: Sometimes, when invalidating JIT code while following an\n  iterator, the newly generated code could be overwritten incorrectly\n\n- CVE-2023-25752: When accessing throttled streams, the count of available\n  bytes needed to be checked in the calling function to be within bounds\n\n- CVE-2023-28164: Dragging a URL from a cross-origin iframe that was removed\n  during the drag could have led to user confusion and website spoofing\n  attacks\n\n- CVE-2023-29533: A website could have obscured the fullscreen notification\n  by using a combination of window.open, fullscreen requests, window.name\n  assignments, and setInterval calls\n\n- CVE-2023-29535: Following a Garbage Collector compaction, weak maps may\n  have been accessed before they were correctly traced\n\n- CVE-2023-29536: An attacker could cause the memory manager to incorrectly\n  free a pointer that addresses attacker-controlled memory, resulting in an\n  assertion, memory corruption, or a potentially exploitable crash\n\n- CVE-2023-29539: When handling the filename directive in the Content-\n  Disposition header, the filename would be truncated if the filename\n  contained a NULL character\n\n- CVE-2023-29548: A wrong lowering instruction in the ARM64 Ion compiler\n  resulted in a wrong optimization result\n\n- CVE-2023-32206: An out-of-bound read could have led to a crash in the\n  RLBox Expat driver\n\n- CVE-2023-32211: A type checking bug would have led to invalid code being\n  compiled\n\n- CVE-2023-37207: A website could have obscured the fullscreen notification\n  by using a URL with a scheme handled by an external program, such as a\n  mailto URL. This could have led to user confusion and possible spoofing\n  attacks\n\n- CVE-2023-50761: The signature of a digitally signed S/MIME email message\n  may optionally specify the signature creation date and time\n\n- CVE-2023-50762: When processing a PGP/MIME payload that contains digitally\n  signed text, the first paragraph of the text was never shown to the user\n\n- CVE-2024-0746: A Linux user opening the print preview dialog could have\n  caused the browser to crash\n\n- CVE-2024-0750: A bug in popup notifications delay calculation could have\n  made it possible for an attacker to trick a user into granting permissions\n\n- CVE-2024-0751: A malicious devtools extension could have been used to\n  escalate privileges\n\n- CVE-2024-1546: When storing and re-accessing data on a networking channel,\n  the length of buffers may have been confused, resulting in an out-of-\n  bounds memory read\n\n- CVE-2024-1547: Through a series of API calls and redirects, an attacker-\n  controlled alert dialog could have been displayed on another website (with\n  the victim website's URL shown). This vulnerability affects Firefox < 123,\n  Firefox ESR < 115.8, and Thunderbird < 115.8\n\n- CVE-2024-1548: A website could have obscured the fullscreen notification\n  by using a dropdown select input element\n\n- CVE-2024-1549: If a website set a large custom cursor, portions of the\n  cursor could have overlapped with the permission dialog, potentially\n  resulting in user confusion and unexpected granted permissions\n\n- CVE-2024-1550: A malicious website could have used a combination of\n  exiting fullscreen mode and `requestPointerLock` to cause the user's mouse\n  to be re-positioned unexpectedly, which could have led to user confusion\n  and inadvertently granting permissions they did not intend to grant\n\n- CVE-2024-1551: Set-Cookie response headers were being incorrectly honored\n  in multipart HTTP responses\n\n- CVE-2024-1553: Memory safety bugs present in Firefox 122, Firefox ESR\n  115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort some of these could have\n  been exploited to run arbitrary code\n\n- CVE-2024-2608: `AppendEncodedAttributeValue(),\n  ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could\n  have experienced integer overflows, causing underallocation of an output\n  buffer leading to an out of bounds write\n\n- CVE-2024-2609: The permission prompt input delay could expire while the\n  window is not in focus\n\n- CVE-2024-2610: Using a markup injection an attacker could have stolen\n  nonce values\n\n- CVE-2024-2611: A missing delay on when pointer lock was used could have\n  allowed a malicious page to trick a user into granting permissions\n\n- CVE-2024-2612: If an attacker could find a way to trigger a particular\n  code path in `SafeRefPtr`, it could have triggered a crash or potentially\n  be leveraged to achieve code execution\n\n- CVE-2024-2614: Memory safety bugs present in Firefox 123, Firefox ESR\n  115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort some of these could have\n  been exploited to run arbitrary code\n\n- CVE-2024-2616: To harden ICU against exploitation, the behavior for out-\n  of-memory conditions was changed to crash instead of attempt to continue\n\n- CVE-2024-3302: There was no limit to the number of HTTP/2 CONTINUATION\n  frames that would be processed\n\n- CVE-2024-3852: GetBoundName could return the wrong version of an object\n  when JIT optimizations were applied\n\n- CVE-2024-3857: The JIT created incorrect code for arguments in certain\n  cases\n\n- CVE-2024-3859: On 32-bit versions there were integer-overflows that led to\n  an out-of-bounds-read that potentially could be triggered by a malformed\n  OpenType font\n\n- CVE-2024-3861: If an AlignedBuffer were assigned to itself, the subsequent\n  self-move could result in an incorrect reference count and later use-\n  after-free\n\n- CVE-2024-3864: Memory safety bug present in Firefox 124, Firefox ESR\n  115.9, and Thunderbird 115.9. This bug showed evidence of memory\n  corruption and we presume that with enough effort this could have been\n  exploited to run arbitrary code\n\n- CVE-2024-4767: If the `browser.privatebrowsing.autostart` preference is\n  enabled, IndexedDB files were not properly deleted when the window was\n  closed\n\n- CVE-2024-4768: A bug in popup notifications' interaction with WebAuthn\n  made it easier for an attacker to trick a user into granting permissions\n\n- CVE-2024-4769: When importing resources using Web Workers, error messages\n  would distinguish the difference between `application/javascript`\n  responses and non-script responses\n\n- CVE-2024-4770: When saving a page to PDF, certain font styles could have\n  led to a potential use-after-free crash\n\n- CVE-2024-4777: Memory safety bugs present in Firefox 125, Firefox ESR\n  115.10, and Thunderbird 115.10. Some of these bugs showed evidence of\n  memory corruption and we presume that with enough effort some of these\n  could have been exploited to run arbitrary code\n\n- CVE-2024-5688: If a garbage collection was triggered at the right time, a\n  use-after-free could have occurred during object transplant\n\n- CVE-2024-5690: By monitoring the time certain operations take, an attacker\n  could have guessed which external protocol handlers were functional on a\n  user's system\n\n- CVE-2024-5691: By tricking the browser with a `X-Frame-Options` header, a\n  sandboxed iframe could have presented a button that, if clicked by a user,\n  would bypass restrictions to open a new window\n\n- CVE-2024-5693: Offscreen Canvas did not properly track cross-origin\n  tainting, which could be used to access image data from another site in\n  violation of same-origin policy\n\n- CVE-2024-5696: By manipulating the text in an `&lt;input&gt;` tag, an\n  attacker could have caused corrupt memory leading to a potentially\n  exploitable crash\n\n- CVE-2024-5700: Memory safety bugs present in Firefox 126, Firefox ESR\n  115.11, and Thunderbird 115.11. Some of these bugs showed evidence of\n  memory corruption and we presume that with enough effort some of these\n  could have been exploited to run arbitrary code\n\n- CVE-2024-6600: Due to large allocation checks in Angle for GLSL shaders\n  being too lenient an out-of-bounds access could occur when allocating more\n  than 8192 ints in private shader memory on macOS. This vulnerability\n  affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and\n  Thunderbird < 128\n\n- CVE-2024-6601: A race condition could lead to a cross-origin container\n  obtaining permissions of the top-level origin\n\n- CVE-2024-6602: A mismatch between allocator and deallocator could have led\n  to memory corruption\n\n- CVE-2024-6603: In an out-of-memory scenario an allocation could fail but\n  free would have been called on the pointer afterwards leading to memory\n  corruption\n\n- CVE-2024-6604: Memory safety bugs present in Firefox 127, Firefox ESR\n  115.12, and Thunderbird 115.12. Some of these bugs showed evidence of\n  memory corruption and we presume that with enough effort some of these\n  could have been exploited to run arbitrary code\n\n- CVE-2024-6606: Clipboard code failed to check the index on an array access\n\n- CVE-2024-6607: It was possible to prevent a user from exiting pointerlock\n  when pressing escape and to overlay customValidity notifications from a\n  `&lt;select&gt;` element over certain permission prompts\n\n- CVE-2024-6608: It was possible to move the cursor using pointerlock from\n  an iframe\n\n- CVE-2024-6609: When almost out-of-memory an elliptic curve key which was\n  never allocated could have been freed again\n\n- CVE-2024-6610: Form validation popups could capture escape key presses\n\n- CVE-2024-6611: A nested iframe, triggering a cross-site navigation, could\n  send SameSite=Strict or Lax cookies\n\n- CVE-2024-6612: CSP violations generated links in the console tab of the\n  developer tools, pointing to the violating resource\n\n- CVE-2024-6613: The frame iterator could get stuck in a loop when\n  encountering certain wasm frames leading to incorrect stack traces\n\n- CVE-2024-6614: The frame iterator could get stuck in a loop when\n  encountering certain wasm frames leading to incorrect stack traces\n\n- CVE-2024-7518: Select options could obscure the fullscreen notification\n  dialog\n\n- CVE-2024-7521: Incomplete WebAssembly exception handing could have led to\n  a use-after-free\n\n- CVE-2024-7522: Editor code failed to check an attribute value\n\n- CVE-2024-7525: It was possible for a web extension with minimal\n  permissions to create a `StreamFilter` which could be used to read and\n  modify the response body of requests on any site\n\n- CVE-2024-7526: ANGLE failed to initialize parameters which lead to reading\n  from uninitialized memory\n\n- CVE-2024-7527: Unexpected marking work at the start of sweeping could have\n  led to a use-after-free\n\n- CVE-2024-7529: The date picker could partially obscure security prompts\n\n- CVE-2024-7652: An error in the ECMA-262 specification relating to Async\n  Generators could have resulted in a type confusion, potentially leading to\n  memory corruption and an exploitable crash\n\n- CVE-2024-8394: When aborting the verification of an OTR chat session, an\n  attacker could have caused a use-after-free bug leading to a potentially\n  exploitable crash\n\n- CVE-2024-9392: A compromised content process could have allowed for the\n  arbitrary loading of cross-origin pages\n\n- CVE-2024-9393: An attacker could, via a specially crafted multipart\n  response, execute arbitrary JavaScript under the `resource://pdf.js`\n  origin\n\n- CVE-2024-9394: An attacker could, via a specially crafted multipart\n  response, execute arbitrary JavaScript under the `resource://devtools`\n  origin\n\n- CVE-2024-9396: It is currently unknown if this issue is exploitable but a\n  condition may arise where the structured clone of certain objects could\n  lead to memory corruption\n\n- CVE-2024-9397: A missing delay in directory upload UI could have made it\n  possible for an attacker to trick a user into granting permission via\n  clickjacking\n\n- CVE-2024-9398: By checking the result of calls to `window.open` with\n  specifically set protocol handlers, an attacker could determine if the\n  application which implements that protocol handler is installed\n\n- CVE-2024-9399: A website configured to initiate a specially crafted\n  WebTransport session could crash the Firefox process leading to a denial\n  of service condition\n\n- CVE-2024-9400: A potential memory corruption vulnerability could be\n  triggered if an attacker had the ability to trigger an OOM at a specific\n  moment during JIT compilation\n\n- CVE-2024-9401: Memory safety bugs present in Firefox 130, Firefox ESR\n  115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs\n  showed evidence of memory corruption and we presume that with enough\n  effort some of these could have been exploited to run arbitrary code\n\n- CVE-2024-10458: A permission leak could have occurred from a trusted site\n  to an untrusted site via `embed` or `object` elements\n\n- CVE-2024-10459: An attacker could have caused a use-after-free when\n  accessibility was enabled, leading to a potentially exploitable crash\n\n- CVE-2024-10460: The origin of an external protocol handler prompt could\n  have been obscured using a data: URL within an `iframe`. This\n  vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird <\n  128.4, and Thunderbird < 132\n\n- CVE-2024-10461: In multipart/x-mixed-replace responses, `Content-\n  Disposition: attachment` in the response header was not respected and did\n  not force a download, which could allow XSS attacks\n\n- CVE-2024-10462: Truncation of a long URL could have allowed origin\n  spoofing in a permission prompt\n\n- CVE-2024-10463: Video frames could have been leaked between origins in\n  some situations\n\n- CVE-2024-10464: Repeated writes to history interface attributes could have\n  been used to cause a Denial of Service condition in the browser\n\n- CVE-2024-10465: A clipboard \"paste\" button could persist across tabs which\n  allowed a spoofing attack\n\n- CVE-2024-10466: By sending a specially crafted push message, a remote\n  server could have hung the parent process, causing the browser to become\n  unresponsive\n\n- CVE-2024-10467: Memory safety bugs present in Firefox 131, Firefox ESR\n  128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort some of these could have\n  been exploited to run arbitrary code\n\n- CVE-2024-10468: Potential race conditions in IndexedDB could have caused\n  memory corruption, leading to a potentially exploitable crash\n\n- CVE-2024-11159: Using remote content in OpenPGP encrypted messages can\n  lead to the disclosure of plaintext\n\n- CVE-2024-11692: An attacker could cause a select dropdown to be shown over\n  another tab; this could have led to user confusion and possible spoofing\n  attacks\n\n- CVE-2024-11693: The executable file warning was not presented when\n  downloading .library-ms files\n\n- CVE-2024-11694: Enhanced Tracking Protection's Strict mode may have\n  inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through\n  the Google SafeFrame shim in the Web Compatibility extension\n\n- CVE-2024-11695: A crafted URL containing Arabic script and whitespace\n  characters could have hidden the true origin of the page, resulting in a\n  potential spoofing attack\n\n- CVE-2024-11696: The application failed to account for exceptions thrown by\n  the `loadManifestFromFile` method during add-on signature verification\n\n- CVE-2024-11697: When handling keypress events, an attacker may have been\n  able to trick a user into bypassing the \"Open Executable File?\"\n  confirmation dialog\n\n- CVE-2024-11700: Malicious websites may have been able to perform user\n  intent confirmation through tapjacking\n\n- CVE-2024-11701: The incorrect domain may have been displayed in the\n  address bar during an interrupted navigation attempt\n\n- CVE-2024-11702: Copying sensitive information from Private Browsing tabs\n  on Android, such as passwords, may have inadvertently stored data in the\n  cloud-based clipboard history if enabled\n\n- CVE-2024-11704: A double-free issue could have occurred in\n  `sec_pkcs7_decoder_start_decrypt()` when handling an error path\n\n- CVE-2024-11705: `NSC_DeriveKey` inadvertently assumed that the `phKey`\n  parameter is always non-NULL. When it was passed as NULL, a segmentation\n  fault (SEGV) occurred, leading to crashes\n\n- CVE-2024-11706: A null pointer dereference may have inadvertently occurred\n  in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function,\n  when handling malformed or improperly formatted input files\n\n- CVE-2024-11708: Missing thread synchronization primitives could have led\n  to a data race on members of the PlaybackParams structure\n\n- CVE-2025-0237: The WebChannel API, which is used to transport various\n  information across processes, did not check the sending principal but\n  rather accepted the principal being sent. This could have led to privilege\n  escalation attacks\n\n- CVE-2025-0238: Assuming a controlled failed memory allocation, an attacker\n  could have caused a use-after-free, leading to a potentially exploitable\n  crash\n\n- CVE-2025-0239: When using Alt-Svc, ALPN did not properly validate\n  certificates when the original server is redirecting to an insecure site\n\n- CVE-2025-0240: Parsing a JavaScript module as JSON could, under some\n  circumstances, cause cross-compartment access, which may result in a use-\n  after-free\n\n- CVE-2025-0241: When segmenting specially crafted text, segmentation would\n  corrupt memory leading to a potentially exploitable crash\n\n- CVE-2025-0242: Memory safety bugs present in Firefox 133, Thunderbird 133,\n  Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird\n  128.5. Some of these bugs showed evidence of memory corruption and we\n  presume that with enough effort some of these could have been exploited to\n  run arbitrary code\n\n- CVE-2025-0247: Memory safety bugs present in Firefox 133 and Thunderbird\n  133. Some of these bugs showed evidence of memory corruption and we\n  presume that with enough effort some of these could have been exploited to\n  run arbitrary code\n\n- CVE-2025-0510: Thunderbird displayed an incorrect sender address if the\n  From field of an email used the invalid group name syntax that is\n  described in CVE-2024-49040\n\n- CVE-2025-1009: An attacker could have caused a use-after-free via crafted\n  XSLT data, leading to a potentially exploitable crash\n\n- CVE-2025-1010: An attacker could have caused a use-after-free via the\n  Custom Highlight API, leading to a potentially exploitable crash\n\n- CVE-2025-1012: A race during concurrent delazification could have led to a\n  use-after-free\n\n- CVE-2025-1013: A race condition could have led to private browsing tabs\n  being opened in normal browsing windows. This could have resulted in a\n  potential privacy leak\n\n- CVE-2025-1014: Certificate length was not properly checked when added to a\n  certificate store. In practice only trusted data was processed\n\n- CVE-2025-1015: The Thunderbird Address Book URI fields contained\n  unsanitized links. This could be used by an attacker to create and export\n  an address book containing a malicious payload in a field. For example, in\n  the “Other” field of the Instant Messaging section. If another user\n  imported the address book, clicking on the link could result in opening a\n  web page inside Thunderbird, and that page could execute (unprivileged)\n  JavaScript\n\n- CVE-2025-1016: Memory safety bugs present in Firefox 134, Thunderbird 134,\n  Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird\n  128.6. Some of these bugs showed evidence of memory corruption and we\n  presume that with enough effort some of these could have been exploited to\n  run arbitrary code\n\n- CVE-2025-1018: The fullscreen notification is prematurely hidden when\n  fullscreen is re-requested quickly by the user. This could have been\n  leveraged to perform a potential spoofing attack\n\n- CVE-2025-1019: The z-order of the browser windows could be manipulated to\n  hide the fullscreen notification. This could potentially be leveraged to\n  perform a spoofing attack\n\n- CVE-2025-1931: It was possible to cause a use-after-free in the content\n  process side of a WebTransport connection, leading to a potentially\n  exploitable crash\n\n- CVE-2025-1932: An inconsistent comparator in xslt/txNodeSorter could have\n  resulted in potentially exploitable out-of-bounds access. Only affected\n  version 122 and later\n\n- CVE-2025-1933: On 64-bit CPUs, when the JIT compiles WASM i32 return\n  values they can pick up bits from left over memory. This can potentially\n  cause them to be treated as a different type\n\n- CVE-2025-1934: It was possible to interrupt the processing of a RegExp\n  bailout and run additional JavaScript, potentially triggering garbage\n  collection when the engine was not expecting it\n\n- CVE-2025-1935: A web page could trick a user into setting that site as the\n  default handler for a custom URL protocol\n\n- CVE-2025-1936: URLs retrieve local file content packaged in a ZIP archive.\n  The null and everything after it was ignored when retrieving the content\n  from the archive, but the fake extension after the null was used to\n  determine the type of content. This could have been used to hide code in a\n  web extension disguised as something else like an image\n\n- CVE-2025-1937: Memory safety bugs present in Firefox 135, Thunderbird 135,\n  Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of\n  these bugs showed evidence of memory corruption and we presume that with\n  enough effort some of these could have been exploited to run arbitrary\n  code\n\n- CVE-2025-1938: Memory safety bugs present in Firefox 135, Thunderbird 135,\n  Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed\n  evidence of memory corruption and we presume that with enough effort some\n  of these could have been exploited to run arbitrary code\n\n- CVE-2025-1942: When String.toUpperCase() caused a string to get longer it\n  was possible for uninitialized memory to be incorporated into the result\n  string\n\n- CVE-2025-3028: JavaScript code running while transforming a document with\n  the XSLTProcessor could lead to a use-after-free\n\n- CVE-2025-3029: A crafted URL containing specific Unicode characters could\n  have hidden the true origin of the page, resulting in a potential spoofing\n  attack\n\n- CVE-2025-3030: Memory safety bugs present in Firefox 136, Thunderbird 136,\n  Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed\n  evidence of memory corruption and we presume that with enough effort some\n  of these could have been exploited to run arbitrary code\n\n- CVE-2025-3031: An attacker could read 32 bits of values spilled onto the\n  stack in a JIT compiled function\n\n- CVE-2025-3032: Leaking of file descriptors from the fork server to web\n  content processes could allow for privilege escalation attacks\n\n- CVE-2025-3033: This bug only affects Firefox on Windows. Other operating\n  systems are unaffected.*\n\n- CVE-2025-5262: A double-free could have occurred in\n  `vpx_codec_enc_init_multi` after a failed allocation when initializing the\n  encoder for WebRTC. This could have caused memory corruption and a\n  potentially exploitable crash\n\n- CVE-2025-5986: A crafted HTML email using mailbox:/// links can trigger\n  automatic, unsolicited downloads of .pdf files to the user's desktop or\n  home directory without prompting, even if auto-saving is disabled. This\n  behavior can be abused to fill the disk with garbage data (e.g. using\n  /dev/urandom on Linux) or to leak Windows credentials via SMB links when\n  the email is viewed in HTML mode. While user interaction is required to\n  download the .pdf file, visual obfuscation can conceal the download\n  trigger. Viewing the email in HTML mode is enough to load external content\n\n- CVE-2025-8027: On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the\n  64-bit return value space on the stack. Baseline-JIT, however, read the\n  entire 64 bits\n\n- CVE-2025-8028: On arm64, a WASM `br_table` instruction with a lot of\n  entries could lead to the label being too far from the instruction causing\n  truncation and incorrect computation of the branch address\n\n- CVE-2025-8029: Thunderbird executed `javascript:` URLs when used in\n  `object` and `embed` tags\n\n- CVE-2025-8030: Insufficient escaping in the “Copy as cURL” feature could\n  potentially be used to trick a user into executing unexpected code\n\n- CVE-2025-8031: The `username:password` part was not correctly stripped\n  from URLs in CSP reports potentially leaking HTTP Basic Authentication\n  credentials\n\n- CVE-2025-8032: XSLT document loading did not correctly propagate the\n  source document which bypassed its CSP\n\n- CVE-2025-8033: The JavaScript engine did not handle closed generators\n  correctly and it was possible to resume them leading to a nullptr deref\n\n- CVE-2025-8034: Memory safety bugs present in Firefox ESR 115.25, Firefox\n  ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR\n  140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence\n  of memory corruption and we presume that with enough effort some of these\n  could have been exploited to run arbitrary code\n\n- CVE-2025-8035: Memory safety bugs present in Firefox ESR 128.12,\n  Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox\n  140 and Thunderbird 140. Some of these bugs showed evidence of memory\n  corruption and we presume that with enough effort some of these could have\n  been exploited to run arbitrary code\n\n- CVE-2025-8036: Thunderbird cached CORS preflight responses across IP\n  address changes. This allowed circumventing CORS with DNS rebinding\n\n- CVE-2025-8037: Setting a nameless cookie with an equals sign in the value\n  shadowed other cookies. Even if the nameless cookie was set over HTTP and\n  the shadowed cookie included the `Secure` attribute\n\n- CVE-2025-9179: An attacker was able to perform memory corruption in the\n  GMP process which processes encrypted media. This process is also heavily\n  sandboxed, but represents slightly different privileges from the content\n  process\n\n- CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D\n  component\n\n- CVE-2025-9181: Uninitialized memory in the JavaScript Engine component\n\n- CVE-2025-9182: Denial-of-service due to out-of-memory in the Graphics:\n  WebRender component\n\n- CVE-2025-9184: Memory safety bugs present in Firefox ESR 140.1,\n  Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs\n  showed evidence of memory corruption and we presume that with enough\n  effort some of these could have been exploited to run arbitrary code\n\n- CVE-2025-9185: Memory safety bugs present in Firefox ESR 115.26, Firefox\n  ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR\n  140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence\n  of memory corruption and we presume that with enough effort some of these\n  could have been exploited to run arbitrary code\n\n- CVE-2025-10527: Sandbox escape due to use-after-free in the Graphics:\n  Canvas2D component\n\n- CVE-2025-10528: Sandbox escape due to undefined behavior, invalid pointer\n  in the Graphics: Canvas2D component\n\n- CVE-2025-10529: Same-origin policy bypass in the Layout component\n\n- CVE-2025-10532: Incorrect boundary conditions in the JavaScript: GC\n  component\n\n- CVE-2025-10533: Integer overflow in the SVG component\n\n- CVE-2025-10536: Information disclosure in the Networking: Cache component\n\n- CVE-2025-11708: Use-after-free in MediaTrackGraphImpl::GetInstance()\n\n- CVE-2025-11709: A compromised web process was able to trigger out of\n  bounds reads and writes in a more privileged process using manipulated\n  WebGL textures\n\n- CVE-2025-11710: A compromised web process using malicious IPC messages\n  could have caused the privileged browser process to reveal blocks of its\n  memory to the compromised process\n\n- CVE-2025-11711: There was a way to change the value of JavaScript Object\n  properties that were supposed to be non-writeable\n\n- CVE-2025-11712: A malicious page could have used the type attribute of an\n  OBJECT tag to override the default browser behavior when encountering a\n  web resource served without a content-type. This could have contributed to\n  an XSS on a site that unsafely serves files without a content-type header\n\n- CVE-2025-11713: Insufficient escaping in the “Copy as cURL” feature could\n  have been used to trick a user into executing unexpected code on Windows.\n  This did not affect the application when running on other operating\n  systems\n\n- CVE-2025-11714: Memory safety bugs present in Firefox ESR 115.28, Firefox\n  ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of\n  these bugs showed evidence of memory corruption and we presume that with\n  enough effort some of these could have been exploited to run arbitrary\n  code\n\n- CVE-2025-14322: Sandbox escape due to incorrect boundary conditions in the\n  Graphics: CanvasWebGL component\n\n- CVE-2025-14323: Privilege escalation in the DOM: Notifications component\n\n- CVE-2025-14328: Privilege escalation in the Netmonitor component\n\n- CVE-2025-14329: Privilege escalation in the Netmonitor component\n\n- CVE-2025-14331: Same-origin policy bypass in the Request Handling\n  component\n\n- CVE-2025-26695: When requesting an OpenPGP key from a WKD server, an\n  incorrect padding size was used and a network observer could have learned\n  the length of the requested email address\n\n- CVE-2025-26696: Certain crafted MIME email messages that claimed to\n  contain an encrypted OpenPGP message, which instead contained an OpenPGP\n  signed message, were wrongly shown as being encrypted\n\n- CVE-2026-0818: When a user explicitly requested Thunderbird to decrypt an\n  inline OpenPGP message that was embedded in a text section of an email\n  that was formatted and styled with HTML and CSS, then the decrypted\n  contents were rendered in a context in which the CSS styles from the outer\n  messages were active. If the user had additionally allowed loading of the\n  remote content referenced by the outer email message, and the email was\n  crafted by the sender using a combination of CSS rules and fonts and\n  animations, then it was possible to extract the secret contents of the\n  email\n\n- CVE-2026-0879: Sandbox escape due to incorrect boundary conditions in the\n  Graphics component\n\n- CVE-2026-0882: Use-after-free in the IPC component\n\n- CVE-2026-0883: Information disclosure in the Networking component\n\n- CVE-2026-0884: Use-after-free in the JavaScript Engine component\n\n- CVE-2026-0885: Use-after-free in the JavaScript: GC component\n\n- CVE-2026-0886: Incorrect boundary conditions in the Graphics component\n\n- CVE-2026-0887: Clickjacking issue, information disclosure in the PDF\n  Viewer component\n\n- CVE-2026-0890: Spoofing issue in the DOM: Copy & Paste and Drag & Drop\n  component\n\n- CVE-2026-2447: Heap buffer overflow in libvpx\n\n- CVE-2026-2769: Use-after-free in the Storage: IndexedDB component\n\n- CVE-2026-2772: Use-after-free in the Audio/Video: Playback component\n\n- CVE-2026-2773: Incorrect boundary conditions in the Web Audio component\n\n- CVE-2026-2774: Integer overflow in the Audio/Video component\n\n- CVE-2026-2779: Incorrect boundary conditions in the Networking: JAR\n  component\n\n- CVE-2026-2782: Privilege escalation in the Netmonitor component\n\n- CVE-2026-2786: Use-after-free in the JavaScript Engine component\n\n- CVE-2026-2787: Use-after-free in the DOM: Window and Location component\n\n- CVE-2026-2788: Incorrect boundary conditions in the Audio/Video: GMP\n  component\n\n- CVE-2026-2789: Use-after-free in the Graphics: ImageLib component\n\n- CVE-2026-2790: Same-origin policy bypass in the Networking: JAR component\n\n- CVE-2026-3889: Spoofing issue in Thunderbird\n\n- CVE-2026-4371: A malicious mail server could send malformed strings with\n  negative lengths, causing the parser to read memory outside the buffer. If\n  a mail server or connection to a mail server were compromised, an attacker\n  could cause the parser to malfunction, potentially crashing Thunderbird or\n  leaking sensitive data\n\n- CVE-2026-4692: Sandbox escape in the Responsive Design Mode component\n\n- CVE-2026-4694: Incorrect boundary conditions, integer overflow in the\n  Graphics component\n\n- CVE-2026-4710: Incorrect boundary conditions in the Audio/Video component\n\n- CVE-2026-4718: Undefined behavior in the WebRTC: Signaling component\n\n- CVE-2026-4721: Memory safety bugs present in Firefox ESR 115.33, Firefox\n  ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of\n  these bugs showed evidence of memory corruption and we presume that with\n  enough effort some of these could have been exploited to run arbitrary\n  code\n\n- CVE-2026-5731: Memory safety bugs present in Firefox ESR 115.34.0, Firefox\n  ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird\n  149.0.1. Some of these bugs showed evidence of memory corruption and we\n  presume that with enough effort some of these could have been exploited to\n  run arbitrary code\n\n- CVE-2026-8090: Use-after-free in the DOM: Networking component\n\n- CVE-2026-8091: Incorrect boundary conditions in the Audio/Video: Playback\n  component\n\n- CVE-2026-8092: Memory safety bugs present in Firefox ESR 115.35.1, Firefox\n  ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of\n  memory corruption and we presume that with enough effort some of these\n  could have been exploited to run arbitrary code\n\n- CVE-2026-8094: Other issue in the WebRTC component\n\n- CVE-2026-12289: Privilege escalation in the Graphics: WebRender component\n\n- CVE-2026-12305: Memory safety bug fixed in Firefox 152\n\n- CVE-2026-12306: Memory safety bug fixed in Firefox 152\n\n- CVE-2026-12309: Memory safety bug fixed in Firefox 152\n\n- CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL\n  component",
        "title": "Details"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
        "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2026/clsa-2026_1785560172.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-08-01T10:35:22Z",
      "generator": {
        "date": "2026-08-01T10:35:22Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CLSA-2026:1785560172",
      "initial_release_date": "2026-08-01T04:56:14Z",
      "revision_history": [
        {
          "date": "2026-08-01T04:56:14Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-01T10:35:22Z",
          "number": "2",
          "summary": "Official Publication"
        }
      ],
      "status": "final",
      "version": "2"
    },
    "title": "thunderbird: Fix of 252 CVEs"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "AlmaLinux 9.2",
                "product": {
                  "name": "AlmaLinux 9.2",
                  "product_id": "AlmaLinux-9.2",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "AlmaLinux"
          }
        ],
        "category": "vendor",
        "name": "AlmaLinux OS Foundation"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64",
                "product": {
                  "name": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64",
                  "product_id": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@140.12.0-1.el9_2.alma.1.tuxcare.els1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els27?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els25?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els24?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els23?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els19?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els17?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els18?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els16?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els15?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els14?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els13?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els11?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
                "product": {
                  "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
                  "product_id": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/thunderbird@115.4.1-1.el9_2.alma.tuxcare.els1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "TuxCare"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        },
        "product_reference": "thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64 as a component of AlmaLinux 9.2",
          "product_id": "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64"
        },
        "product_reference": "thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
        "relates_to_product_reference": "AlmaLinux-9.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-2611",
      "notes": [
        {
          "category": "description",
          "text": "A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-2611"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1876675",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1876675"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-12/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-12/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-14/"
        }
      ],
      "release_date": "2024-03-19T12:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-03-19T12:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-9396",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-9396"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1912471",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1912471"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-47/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ],
      "release_date": "2024-10-01T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-01T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-0746",
      "notes": [
        {
          "category": "description",
          "text": "A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-0746"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1660223",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1660223"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-04/"
        }
      ],
      "release_date": "2024-01-23T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-01-23T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-3861",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-3861"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1883158",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1883158"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-18/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-19/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-19/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-20/"
        }
      ],
      "release_date": "2024-04-16T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-04-16T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-0882",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0882"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1924125",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1924125"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-03/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-05/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:0667",
          "url": "https://access.redhat.com/errata/RHSA-2026:0667"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:0694",
          "url": "https://access.redhat.com/errata/RHSA-2026:0694"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:0924",
          "url": "https://access.redhat.com/errata/RHSA-2026:0924"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1320",
          "url": "https://access.redhat.com/errata/RHSA-2026:1320"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1413",
          "url": "https://access.redhat.com/errata/RHSA-2026:1413"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1414",
          "url": "https://access.redhat.com/errata/RHSA-2026:1414"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1415",
          "url": "https://access.redhat.com/errata/RHSA-2026:1415"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1461",
          "url": "https://access.redhat.com/errata/RHSA-2026:1461"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1462",
          "url": "https://access.redhat.com/errata/RHSA-2026:1462"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1471",
          "url": "https://access.redhat.com/errata/RHSA-2026:1471"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1487",
          "url": "https://access.redhat.com/errata/RHSA-2026:1487"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2041",
          "url": "https://access.redhat.com/errata/RHSA-2026:2041"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2043",
          "url": "https://access.redhat.com/errata/RHSA-2026:2043"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2044",
          "url": "https://access.redhat.com/errata/RHSA-2026:2044"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2047",
          "url": "https://access.redhat.com/errata/RHSA-2026:2047"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2069",
          "url": "https://access.redhat.com/errata/RHSA-2026:2069"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2070",
          "url": "https://access.redhat.com/errata/RHSA-2026:2070"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2073",
          "url": "https://access.redhat.com/errata/RHSA-2026:2073"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2074",
          "url": "https://access.redhat.com/errata/RHSA-2026:2074"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2220",
          "url": "https://access.redhat.com/errata/RHSA-2026:2220"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2231",
          "url": "https://access.redhat.com/errata/RHSA-2026:2231"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2271",
          "url": "https://access.redhat.com/errata/RHSA-2026:2271"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2286",
          "url": "https://access.redhat.com/errata/RHSA-2026:2286"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-0882",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0882"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2428966",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428966"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0882.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0882.json"
        }
      ],
      "release_date": "2026-01-13T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-01-13T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-1942",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "description",
          "text": "When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string. This vulnerability was fixed in Firefox 136 and Thunderbird 136.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1942"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1947139",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1947139"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-17/"
        }
      ],
      "release_date": "2025-03-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-03-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2026-5731",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-5731"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2021894%2C2022225%2C2022252%2C2022294%2C2023007%2C2023130%2C2023191%2C2023364%2C2023829%2C2024074%2C2024417%2C2024433%2C2024436%2C2024437%2C2024453%2C2024461%2C2024462%2C2024472%2C2024474%2C2024477%2C2025364%2C2025401%2C2025402%2C2025472%2C2026287%2C2026299%2C2026305%2C2026426",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2021894%2C2022225%2C2022252%2C2022294%2C2023007%2C2023130%2C2023191%2C2023364%2C2023829%2C2024074%2C2024417%2C2024433%2C2024436%2C2024437%2C2024453%2C2024461%2C2024462%2C2024472%2C2024474%2C2024477%2C2025364%2C2025401%2C2025402%2C2025472%2C2026287%2C2026299%2C2026305%2C2026426"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-25/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-25/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-26/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-26/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-27/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-27/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-28/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-28/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-29/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:11805",
          "url": "https://access.redhat.com/errata/RHSA-2026:11805"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:11813",
          "url": "https://access.redhat.com/errata/RHSA-2026:11813"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:12264",
          "url": "https://access.redhat.com/errata/RHSA-2026:12264"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13342",
          "url": "https://access.redhat.com/errata/RHSA-2026:13342"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13412",
          "url": "https://access.redhat.com/errata/RHSA-2026:13412"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13533",
          "url": "https://access.redhat.com/errata/RHSA-2026:13533"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13582",
          "url": "https://access.redhat.com/errata/RHSA-2026:13582"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13583",
          "url": "https://access.redhat.com/errata/RHSA-2026:13583"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13596",
          "url": "https://access.redhat.com/errata/RHSA-2026:13596"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13600",
          "url": "https://access.redhat.com/errata/RHSA-2026:13600"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13665",
          "url": "https://access.redhat.com/errata/RHSA-2026:13665"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13682",
          "url": "https://access.redhat.com/errata/RHSA-2026:13682"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13683",
          "url": "https://access.redhat.com/errata/RHSA-2026:13683"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13922",
          "url": "https://access.redhat.com/errata/RHSA-2026:13922"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:13977",
          "url": "https://access.redhat.com/errata/RHSA-2026:13977"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:14223",
          "url": "https://access.redhat.com/errata/RHSA-2026:14223"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:14303",
          "url": "https://access.redhat.com/errata/RHSA-2026:14303"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:15889",
          "url": "https://access.redhat.com/errata/RHSA-2026:15889"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7671",
          "url": "https://access.redhat.com/errata/RHSA-2026:7671"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7672",
          "url": "https://access.redhat.com/errata/RHSA-2026:7672"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8052",
          "url": "https://access.redhat.com/errata/RHSA-2026:8052"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8459",
          "url": "https://access.redhat.com/errata/RHSA-2026:8459"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:9345",
          "url": "https://access.redhat.com/errata/RHSA-2026:9345"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:9638",
          "url": "https://access.redhat.com/errata/RHSA-2026:9638"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-5731",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5731"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2455901",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455901"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5731.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5731.json"
        }
      ],
      "release_date": "2026-04-07T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-04-07T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-11694",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
      },
      "notes": [
        {
          "category": "description",
          "text": "Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, Thunderbird < 128.5, and Thunderbird < 115.18.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11694"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1924167",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1924167"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-64/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-64/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-65/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-65/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-68/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-68/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-70/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-70/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00029.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00029.html"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-5690",
      "cwe": {
        "id": "CWE-203",
        "name": "Observable Discrepancy"
      },
      "notes": [
        {
          "category": "description",
          "text": "By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-5690"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1883693",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1883693"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-25/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-25/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-26/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-26/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-28/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-28/"
        }
      ],
      "release_date": "2024-06-11T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-06-11T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-3030",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 137, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-3030"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1850615%2C1932468%2C1942551%2C1951017%2C1951494",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1850615%2C1932468%2C1942551%2C1951017%2C1951494"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-20/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-23/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-24/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-24/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/04/msg00005.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00005.html"
        }
      ],
      "release_date": "2025-04-01T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-04-01T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-1015",
      "notes": [
        {
          "category": "description",
          "text": "The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant Messaging section. If another user imported the address book, clicking on the link could result in opening a web page inside Thunderbird, and that page could execute (unprivileged) JavaScript. This vulnerability was fixed in Thunderbird 128.7 and Thunderbird 135.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1015"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1939458",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1939458"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-10/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-11/"
        }
      ],
      "release_date": "2025-02-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-02-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-6209",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"
      },
      "notes": [
        {
          "category": "description",
          "text": "Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal \"/../\" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6209"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1858570",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1858570"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5561",
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-52/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        }
      ],
      "release_date": "2023-11-21T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-11-21T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-6613",
      "cwe": {
        "id": "CWE-209",
        "name": "Generation of Error Message Containing Sensitive Information"
      },
      "notes": [
        {
          "category": "description",
          "text": "The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird < 128.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6613"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1900523",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1900523"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2025-8036",
      "cwe": {
        "id": "CWE-350",
        "name": "Reliance on Reverse DNS Resolution for a Security-Critical Action"
      },
      "notes": [
        {
          "category": "description",
          "text": "Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8036"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1960834",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1960834"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        },
        {
          "category": "external",
          "summary": "https://www.kb.cert.org/vuls/id/652514",
          "url": "https://www.kb.cert.org/vuls/id/652514"
        }
      ],
      "release_date": "2025-07-22T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-07-22T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2026-8092",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-8092"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1806249%2C2021977%2C2022576%2C2022722%2C2024439%2C2027883%2C2029463%2C2030323%2C2032042%2C2032043%2C2033270%2C2033637%2C2034422%2C2034496%2C2035879%2C2036516",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1806249%2C2021977%2C2022576%2C2022722%2C2024439%2C2027883%2C2029463%2C2030323%2C2032042%2C2032043%2C2033270%2C2033637%2C2034422%2C2034496%2C2035879%2C2036516"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-40/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-40/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-41/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-41/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-42/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-42/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-43/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-43/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-44/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-44/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:19160",
          "url": "https://access.redhat.com/errata/RHSA-2026:19160"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:20566",
          "url": "https://access.redhat.com/errata/RHSA-2026:20566"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:20574",
          "url": "https://access.redhat.com/errata/RHSA-2026:20574"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:21381",
          "url": "https://access.redhat.com/errata/RHSA-2026:21381"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:22325",
          "url": "https://access.redhat.com/errata/RHSA-2026:22325"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:22643",
          "url": "https://access.redhat.com/errata/RHSA-2026:22643"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24508",
          "url": "https://access.redhat.com/errata/RHSA-2026:24508"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24509",
          "url": "https://access.redhat.com/errata/RHSA-2026:24509"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24510",
          "url": "https://access.redhat.com/errata/RHSA-2026:24510"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24511",
          "url": "https://access.redhat.com/errata/RHSA-2026:24511"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24516",
          "url": "https://access.redhat.com/errata/RHSA-2026:24516"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24755",
          "url": "https://access.redhat.com/errata/RHSA-2026:24755"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24983",
          "url": "https://access.redhat.com/errata/RHSA-2026:24983"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:25015",
          "url": "https://access.redhat.com/errata/RHSA-2026:25015"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26174",
          "url": "https://access.redhat.com/errata/RHSA-2026:26174"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26268",
          "url": "https://access.redhat.com/errata/RHSA-2026:26268"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26269",
          "url": "https://access.redhat.com/errata/RHSA-2026:26269"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26270",
          "url": "https://access.redhat.com/errata/RHSA-2026:26270"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26521",
          "url": "https://access.redhat.com/errata/RHSA-2026:26521"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26536",
          "url": "https://access.redhat.com/errata/RHSA-2026:26536"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26539",
          "url": "https://access.redhat.com/errata/RHSA-2026:26539"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-8092",
          "url": "https://access.redhat.com/security/cve/CVE-2026-8092"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2467708",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467708"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8092.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8092.json"
        }
      ],
      "release_date": "2026-05-07T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-05-07T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-10465",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "notes": [
        {
          "category": "description",
          "text": "A clipboard \"paste\" button could persist across tabs which allowed a spoofing attack. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-10465"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1918853",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1918853"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-59/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html"
        }
      ],
      "release_date": "2024-10-29T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-29T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-9401",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-9401"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1872744%2C1897792%2C1911317%2C1916476",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1872744%2C1897792%2C1911317%2C1916476"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-47/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-48/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-48/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00006.html"
        }
      ],
      "release_date": "2024-10-01T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-01T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-10460",
      "notes": [
        {
          "category": "description",
          "text": "The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-10460"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1912537",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1912537"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-59/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html"
        }
      ],
      "release_date": "2024-10-29T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-29T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-9180",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "notes": [
        {
          "category": "description",
          "text": "Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-9180"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979782",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979782"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-64/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-64/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-65/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-65/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-66/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-66/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-70/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-70/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-71/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-71/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-72/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-72/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html"
        }
      ],
      "release_date": "2025-08-19T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-08-19T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-11692",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "notes": [
        {
          "category": "description",
          "text": "An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11692"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1909535",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1909535"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-64/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-64/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-68/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-68/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00029.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00029.html"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-9400",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-9400"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1915249",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1915249"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-47/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ],
      "release_date": "2024-10-01T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-01T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ]
    },
    {
      "cve": "CVE-2025-1938",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1938"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1922889%2C1935004%2C1943586%2C1943912%2C1948111",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1922889%2C1935004%2C1943586%2C1943912%2C1948111"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-17/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-18/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html"
        }
      ],
      "release_date": "2025-03-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-03-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-28164",
      "notes": [
        {
          "category": "description",
          "text": "Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-28164"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1809122",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1809122"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-09/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-09/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-10/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-11/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-8037",
      "cwe": {
        "id": "CWE-614",
        "name": "Sensitive Cookie in HTTPS Session Without 'Secure' Attribute"
      },
      "notes": [
        {
          "category": "description",
          "text": "Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8037"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1964767",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1964767"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        }
      ],
      "release_date": "2025-07-22T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-07-22T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-7525",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "description",
          "text": "It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-7525"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1909298",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1909298"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-33/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-35/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-37/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ],
      "release_date": "2024-08-06T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-08-06T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-8030",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code ('Code Injection')"
      },
      "notes": [
        {
          "category": "description",
          "text": "Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8030"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1968414",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1968414"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-62/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html"
        }
      ],
      "release_date": "2025-07-22T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-07-22T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-6859",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6859"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1840144",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1840144"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "category": "external",
          "summary": "https://security.gentoo.org/glsa/202401-10",
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5581",
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5582",
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-54/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        }
      ],
      "release_date": "2023-12-19T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-12-19T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-4694",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "description",
          "text": "Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-4694"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2018430",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2018430"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-20/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-21/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-21/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-23/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-24/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-24/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5930",
          "url": "https://access.redhat.com/errata/RHSA-2026:5930"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5931",
          "url": "https://access.redhat.com/errata/RHSA-2026:5931"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5932",
          "url": "https://access.redhat.com/errata/RHSA-2026:5932"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:6188",
          "url": "https://access.redhat.com/errata/RHSA-2026:6188"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:6342",
          "url": "https://access.redhat.com/errata/RHSA-2026:6342"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:6917",
          "url": "https://access.redhat.com/errata/RHSA-2026:6917"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7837",
          "url": "https://access.redhat.com/errata/RHSA-2026:7837"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7838",
          "url": "https://access.redhat.com/errata/RHSA-2026:7838"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7839",
          "url": "https://access.redhat.com/errata/RHSA-2026:7839"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7840",
          "url": "https://access.redhat.com/errata/RHSA-2026:7840"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7841",
          "url": "https://access.redhat.com/errata/RHSA-2026:7841"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7842",
          "url": "https://access.redhat.com/errata/RHSA-2026:7842"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7843",
          "url": "https://access.redhat.com/errata/RHSA-2026:7843"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7845",
          "url": "https://access.redhat.com/errata/RHSA-2026:7845"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7858",
          "url": "https://access.redhat.com/errata/RHSA-2026:7858"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8284",
          "url": "https://access.redhat.com/errata/RHSA-2026:8284"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8285",
          "url": "https://access.redhat.com/errata/RHSA-2026:8285"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8286",
          "url": "https://access.redhat.com/errata/RHSA-2026:8286"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8287",
          "url": "https://access.redhat.com/errata/RHSA-2026:8287"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8288",
          "url": "https://access.redhat.com/errata/RHSA-2026:8288"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8289",
          "url": "https://access.redhat.com/errata/RHSA-2026:8289"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8290",
          "url": "https://access.redhat.com/errata/RHSA-2026:8290"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8315",
          "url": "https://access.redhat.com/errata/RHSA-2026:8315"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8427",
          "url": "https://access.redhat.com/errata/RHSA-2026:8427"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8850",
          "url": "https://access.redhat.com/errata/RHSA-2026:8850"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-4694",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4694"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2450747",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450747"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4694.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4694.json"
        }
      ],
      "release_date": "2026-03-24T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-03-24T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-0883",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "description",
          "text": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0883"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1989340",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1989340"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-03/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-05/"
        }
      ],
      "release_date": "2026-01-13T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-01-13T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-11708",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"
      },
      "notes": [
        {
          "category": "description",
          "text": "Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox < 133 and Thunderbird < 133.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11708"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1922912",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1922912"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-2614",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-2614"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1685358%2C1861016%2C1880405%2C1881093",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1685358%2C1861016%2C1880405%2C1881093"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-12/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-12/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-14/"
        }
      ],
      "release_date": "2024-03-19T12:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-03-19T12:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-12305",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-12305"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2037290",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2037290"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-57/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-60/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-61/"
        }
      ],
      "release_date": "2026-06-16T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-06-16T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-7652",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "description",
          "text": "An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-7652"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1901411",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1901411"
        },
        {
          "category": "external",
          "summary": "https://github.com/tc39/ecma262/security/advisories/GHSA-g38c-wh3c-5h9r",
          "url": "https://github.com/tc39/ecma262/security/advisories/GHSA-g38c-wh3c-5h9r"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-30/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-31/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-09-06T19:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-09-06T19:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-0239",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-0239"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1929156",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1929156"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-05/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html"
        }
      ],
      "release_date": "2025-01-07T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-01-07T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-4581",
      "notes": [
        {
          "category": "description",
          "text": "Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4581"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843758",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843758"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-35/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-35/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-36/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-37/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-37/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/"
        }
      ],
      "release_date": "2023-09-11T09:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-09-11T09:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-11697",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code ('Code Injection')"
      },
      "notes": [
        {
          "category": "description",
          "text": "When handling keypress events, an attacker may have been able to trick a user into bypassing the \"Open Executable File?\" confirmation dialog. This could have led to malicious code execution. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11697"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1842187",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1842187"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-64/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-64/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-68/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-68/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00029.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00029.html"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ]
    },
    {
      "cve": "CVE-2026-0887",
      "cwe": {
        "id": "CWE-497",
        "name": "Exposure of Sensitive System Information to an Unauthorized Control Sphere"
      },
      "notes": [
        {
          "category": "description",
          "text": "Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0887"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2006500",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2006500"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-03/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-05/"
        }
      ],
      "release_date": "2026-01-13T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-01-13T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-9184",
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-9184"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1929482%2C1976376%2C1979163%2C1979955",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1929482%2C1976376%2C1979163%2C1979955"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-64/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-64/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-70/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-70/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-72/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-72/"
        }
      ],
      "release_date": "2025-08-19T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-08-19T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-6603",
      "cwe": {
        "id": "CWE-823",
        "name": "Use of Out-of-range Pointer Offset"
      },
      "notes": [
        {
          "category": "description",
          "text": "In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6603"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895081",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895081"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-30/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-31/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-11693",
      "notes": [
        {
          "category": "description",
          "text": "The executable file warning was not presented when downloading .library-ms files.  \n*Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11693"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1921458",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1921458"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-64/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-64/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-68/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-68/"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-2609",
      "cwe": {
        "id": "CWE-356",
        "name": "Product UI does not Warn User of Unsafe Actions"
      },
      "notes": [
        {
          "category": "description",
          "text": "The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This vulnerability affects Firefox < 124, Firefox ESR < 115.10, and Thunderbird < 115.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-2609"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1866100",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1866100"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-12/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-12/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-19/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-19/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-20/"
        }
      ],
      "release_date": "2024-03-19T12:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-03-19T12:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-11713",
      "cwe": {
        "id": "CWE-116",
        "name": "Improper Encoding or Escaping of Output"
      },
      "notes": [
        {
          "category": "description",
          "text": "Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the application when running on other operating systems. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-11713"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1986142",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1986142"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-81/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-81/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-83/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-83/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-84/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-84/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-85/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-85/"
        }
      ],
      "release_date": "2025-10-14T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-10-14T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-11706",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "description",
          "text": "A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed or improperly formatted input files. This vulnerability affects Firefox < 133 and Thunderbird < 133.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11706"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1923767",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1923767"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-5700",
      "cwe": {
        "id": "CWE-786",
        "name": "Access of Memory Location Before Start of Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-5700"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1862809%2C1889355%2C1893388%2C1895123",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1862809%2C1889355%2C1893388%2C1895123"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-25/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-25/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-26/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-26/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-28/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-28/"
        }
      ],
      "release_date": "2024-06-11T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-06-11T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-4573",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4573"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846687",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846687"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-35/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-35/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-36/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-37/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-37/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/"
        }
      ],
      "release_date": "2023-09-11T08:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-09-11T08:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-11700",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "description",
          "text": "Malicious websites may have been able to perform user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11700"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1836921",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1836921"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2026-12324",
      "cwe": {
        "id": "CWE-703",
        "name": "Improper Check or Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "description",
          "text": "Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-12324"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2038444",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2038444"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-57/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-60/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-61/"
        }
      ],
      "release_date": "2026-06-16T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-06-16T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.4,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ]
    },
    {
      "cve": "CVE-2026-0885",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0885"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2003607",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2003607"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-03/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-05/"
        }
      ],
      "release_date": "2026-01-13T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-01-13T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-6857",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"
      },
      "notes": [
        {
          "category": "description",
          "text": "When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. \n*This bug only affects Firefox on Unix-based operating systems (Android, Linux, MacOS). Windows is unaffected.* This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6857"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1796023",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1796023"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "category": "external",
          "summary": "https://security.gentoo.org/glsa/202401-10",
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5581",
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5582",
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-54/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        }
      ],
      "release_date": "2023-12-19T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-12-19T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-3032",
      "cwe": {
        "id": "CWE-403",
        "name": "Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')"
      },
      "notes": [
        {
          "category": "description",
          "text": "Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-3032"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1949987",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1949987"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-20/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-23/"
        }
      ],
      "release_date": "2025-04-01T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-04-01T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-6606",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "description",
          "text": "Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 128 and Thunderbird < 128.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6606"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1902305",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1902305"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-2612",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-2612"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1879444",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1879444"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-12/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-12/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-14/"
        }
      ],
      "release_date": "2024-03-19T12:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-03-19T12:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-8031",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "notes": [
        {
          "category": "description",
          "text": "The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8031"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1971719",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1971719"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-62/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html"
        }
      ],
      "release_date": "2025-07-22T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-07-22T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-5688",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-5688"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895086",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895086"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-25/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-25/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-26/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-26/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-28/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-28/"
        }
      ],
      "release_date": "2024-06-11T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-06-11T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-12306",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-12306"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2037323",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2037323"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-57/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-60/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-61/"
        }
      ],
      "release_date": "2026-06-16T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-06-16T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-7529",
      "notes": [
        {
          "category": "description",
          "text": "The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-7529"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1903187",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1903187"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-33/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-35/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-37/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ],
      "release_date": "2024-08-06T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-08-06T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-1548",
      "notes": [
        {
          "category": "description",
          "text": "A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-1548"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1832627",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1832627"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-05/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-06/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-06/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-07/"
        }
      ],
      "release_date": "2024-02-20T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-02-20T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-29533",
      "notes": [
        {
          "category": "description",
          "text": "A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>, fullscreen requests, <code>window.name</code> assignments, and <code>setInterval</code> calls. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-29533"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1798219",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1798219"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1814597",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1814597"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-15/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-5732",
      "notes": [
        {
          "category": "description",
          "text": "An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerability affects Firefox < 117, Firefox ESR < 115.4, and Thunderbird < 115.4.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-5732"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1690979",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1690979"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1836962",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1836962"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5535",
          "url": "https://www.debian.org/security/2023/dsa-5535"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5538",
          "url": "https://www.debian.org/security/2023/dsa-5538"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-46/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-47/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-47/"
        }
      ],
      "release_date": "2023-10-25T18:17:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-10-25T18:17:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-8033",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "description",
          "text": "The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8033"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1973990",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1973990"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-57/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-57/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-62/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html"
        }
      ],
      "release_date": "2025-07-22T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-07-22T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.4,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ]
    },
    {
      "cve": "CVE-2023-23598",
      "notes": [
        {
          "category": "description",
          "text": "Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to `DataTransfer.setData`. This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-23598"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1800425",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1800425"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-03/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-6864",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6864"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1736385%2C1810805%2C1846328%2C1856090%2C1858033%2C1858509%2C1862089%2C1862777%2C1864015",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1736385%2C1810805%2C1846328%2C1856090%2C1858033%2C1858509%2C1862089%2C1862777%2C1864015"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "category": "external",
          "summary": "https://security.gentoo.org/glsa/202401-10",
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5581",
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5582",
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-54/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        }
      ],
      "release_date": "2023-12-19T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-12-19T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-4770",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-4770"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1893270",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1893270"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-21/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-21/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-23/"
        }
      ],
      "release_date": "2024-05-14T18:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-05-14T18:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-9392",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "notes": [
        {
          "category": "description",
          "text": "A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-9392"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1899154",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1899154"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1905843",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1905843"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-47/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-48/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-48/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00004.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00004.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00006.html"
        }
      ],
      "release_date": "2024-10-01T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-01T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-1018",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "description",
          "text": "The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1018"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1910818",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1910818"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-07/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-11/"
        }
      ],
      "release_date": "2025-02-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-02-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-0616",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "description",
          "text": "If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-0616"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1806507",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1806507"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-07/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-1945",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 102.10 and Firefox ESR < 102.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-1945"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1777588",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1777588"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-15/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-0430",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a valid signature. Thunderbird versions from 68 to 102.7.0 were affected by this bug. This vulnerability affects Thunderbird < 102.7.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-0430"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1769000",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1769000"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-04/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-4777",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-4777"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1878199%2C1893340",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1878199%2C1893340"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-21/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-21/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-23/"
        }
      ],
      "release_date": "2024-05-14T18:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-05-14T18:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-14323",
      "notes": [
        {
          "category": "description",
          "text": "Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-14323"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1996555",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1996555"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-92/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-93/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-93/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-95/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-96/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "release_date": "2025-12-09T16:17:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-12-09T16:17:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-6207",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6207"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1861344",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1861344"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5561",
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-52/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        }
      ],
      "release_date": "2023-11-21T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-11-21T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-7527",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-7527"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1871303",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1871303"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-33/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-35/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-37/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ],
      "release_date": "2024-08-06T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-08-06T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-11714",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-11714"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1973699%2C1989945%2C1990970%2C1991040%2C1992113",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1973699%2C1989945%2C1990970%2C1991040%2C1992113"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-81/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-81/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-82/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-82/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-83/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-83/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-84/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-84/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-85/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-85/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00015.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00015.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00031.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00031.html"
        }
      ],
      "release_date": "2025-10-14T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-10-14T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-50761",
      "notes": [
        {
          "category": "description",
          "text": "The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If present, Thunderbird did not compare the signature creation date with the message date and time, and displayed a valid signature despite a date or time mismatch. This could be used to give recipients the impression that a message was sent at a different date or time. This vulnerability affects Thunderbird < 115.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-50761"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1865647",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1865647"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5582",
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        }
      ],
      "release_date": "2023-12-19T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-12-19T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-50762",
      "notes": [
        {
          "category": "description",
          "text": "When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user. This is because the text was interpreted as a MIME message and the first paragraph was always treated as an email header section. A digitally signed text from a different context, such as a signed GIT commit, could be used to spoof an email message. This vulnerability affects Thunderbird < 115.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-50762"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1862625",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1862625"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5582",
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        }
      ],
      "release_date": "2023-12-19T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-12-19T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-10533",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-10533"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1980788",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1980788"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-73/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-74/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-74/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-75/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-77/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-78/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html"
        }
      ],
      "release_date": "2025-09-16T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-09-16T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-11701",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "notes": [
        {
          "category": "description",
          "text": "The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 133 and Thunderbird < 133.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11701"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1914797",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1914797"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-10466",
      "notes": [
        {
          "category": "description",
          "text": "By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-10466"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1924154",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1924154"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-59/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html"
        }
      ],
      "release_date": "2024-10-29T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-29T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-1547",
      "notes": [
        {
          "category": "description",
          "text": "Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website (with the victim website's URL shown). This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-1547"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1877879",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1877879"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-05/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-06/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-06/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-07/"
        }
      ],
      "release_date": "2024-02-20T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-02-20T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-2610",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code ('Code Injection')"
      },
      "notes": [
        {
          "category": "description",
          "text": "Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-2610"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1871112",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1871112"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-12/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-12/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-14/"
        }
      ],
      "release_date": "2024-03-19T12:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-03-19T12:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-3864",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-3864"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1888333",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1888333"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-18/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-19/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-19/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-20/"
        }
      ],
      "release_date": "2024-04-16T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-04-16T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-9182",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "description",
          "text": "Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-9182"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1975837",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1975837"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-64/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-64/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-70/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-70/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-72/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-72/"
        }
      ],
      "release_date": "2025-08-19T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-08-19T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.4,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ]
    },
    {
      "cve": "CVE-2024-3859",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "description",
          "text": "On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-3859"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1874489",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1874489"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-18/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-19/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-19/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-20/"
        }
      ],
      "release_date": "2024-04-16T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-04-16T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-7518",
      "notes": [
        {
          "category": "description",
          "text": "Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-7518"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1875354",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1875354"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-33/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-35/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-37/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        }
      ],
      "release_date": "2024-08-06T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-08-06T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-12309",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-12309"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2038476",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2038476"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-57/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-60/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-61/"
        }
      ],
      "release_date": "2026-06-16T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-06-16T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-4580",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "description",
          "text": "Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4580"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843046",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843046"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-36/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/"
        }
      ],
      "release_date": "2023-09-11T09:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-09-11T09:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-2447",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "description",
          "text": "Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2447"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014390",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014390"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-10/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-11/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2026/02/msg00028.html",
          "url": "https://lists.debian.org/debian-lts-announce/2026/02/msg00028.html"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:16174",
          "url": "https://access.redhat.com/errata/RHSA-2026:16174"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3338",
          "url": "https://access.redhat.com/errata/RHSA-2026:3338"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3339",
          "url": "https://access.redhat.com/errata/RHSA-2026:3339"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3361",
          "url": "https://access.redhat.com/errata/RHSA-2026:3361"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3491",
          "url": "https://access.redhat.com/errata/RHSA-2026:3491"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3492",
          "url": "https://access.redhat.com/errata/RHSA-2026:3492"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3493",
          "url": "https://access.redhat.com/errata/RHSA-2026:3493"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3494",
          "url": "https://access.redhat.com/errata/RHSA-2026:3494"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3495",
          "url": "https://access.redhat.com/errata/RHSA-2026:3495"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3496",
          "url": "https://access.redhat.com/errata/RHSA-2026:3496"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3497",
          "url": "https://access.redhat.com/errata/RHSA-2026:3497"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3515",
          "url": "https://access.redhat.com/errata/RHSA-2026:3515"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3516",
          "url": "https://access.redhat.com/errata/RHSA-2026:3516"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3517",
          "url": "https://access.redhat.com/errata/RHSA-2026:3517"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3967",
          "url": "https://access.redhat.com/errata/RHSA-2026:3967"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3976",
          "url": "https://access.redhat.com/errata/RHSA-2026:3976"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3978",
          "url": "https://access.redhat.com/errata/RHSA-2026:3978"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3979",
          "url": "https://access.redhat.com/errata/RHSA-2026:3979"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3980",
          "url": "https://access.redhat.com/errata/RHSA-2026:3980"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3981",
          "url": "https://access.redhat.com/errata/RHSA-2026:3981"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3982",
          "url": "https://access.redhat.com/errata/RHSA-2026:3982"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3983",
          "url": "https://access.redhat.com/errata/RHSA-2026:3983"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3984",
          "url": "https://access.redhat.com/errata/RHSA-2026:3984"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4022",
          "url": "https://access.redhat.com/errata/RHSA-2026:4022"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4152",
          "url": "https://access.redhat.com/errata/RHSA-2026:4152"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4260",
          "url": "https://access.redhat.com/errata/RHSA-2026:4260"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4432",
          "url": "https://access.redhat.com/errata/RHSA-2026:4432"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4447",
          "url": "https://access.redhat.com/errata/RHSA-2026:4447"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4629",
          "url": "https://access.redhat.com/errata/RHSA-2026:4629"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5227",
          "url": "https://access.redhat.com/errata/RHSA-2026:5227"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5228",
          "url": "https://access.redhat.com/errata/RHSA-2026:5228"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5229",
          "url": "https://access.redhat.com/errata/RHSA-2026:5229"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5230",
          "url": "https://access.redhat.com/errata/RHSA-2026:5230"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5231",
          "url": "https://access.redhat.com/errata/RHSA-2026:5231"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5319",
          "url": "https://access.redhat.com/errata/RHSA-2026:5319"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5320",
          "url": "https://access.redhat.com/errata/RHSA-2026:5320"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5323",
          "url": "https://access.redhat.com/errata/RHSA-2026:5323"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5324",
          "url": "https://access.redhat.com/errata/RHSA-2026:5324"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5326",
          "url": "https://access.redhat.com/errata/RHSA-2026:5326"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8746",
          "url": "https://access.redhat.com/errata/RHSA-2026:8746"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8747",
          "url": "https://access.redhat.com/errata/RHSA-2026:8747"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8748",
          "url": "https://access.redhat.com/errata/RHSA-2026:8748"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-2447",
          "url": "https://access.redhat.com/security/cve/CVE-2026-2447"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2440219",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440219"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2447.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2447.json"
        }
      ],
      "release_date": "2026-02-16T15:18:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-02-16T15:18:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-8090",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-8090"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2034352",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2034352"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-40/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-40/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-41/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-41/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-42/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-42/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-43/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-43/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-44/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-44/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:19160",
          "url": "https://access.redhat.com/errata/RHSA-2026:19160"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:20566",
          "url": "https://access.redhat.com/errata/RHSA-2026:20566"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:20574",
          "url": "https://access.redhat.com/errata/RHSA-2026:20574"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:21381",
          "url": "https://access.redhat.com/errata/RHSA-2026:21381"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:22325",
          "url": "https://access.redhat.com/errata/RHSA-2026:22325"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:22643",
          "url": "https://access.redhat.com/errata/RHSA-2026:22643"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24508",
          "url": "https://access.redhat.com/errata/RHSA-2026:24508"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24509",
          "url": "https://access.redhat.com/errata/RHSA-2026:24509"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24510",
          "url": "https://access.redhat.com/errata/RHSA-2026:24510"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24511",
          "url": "https://access.redhat.com/errata/RHSA-2026:24511"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24516",
          "url": "https://access.redhat.com/errata/RHSA-2026:24516"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24755",
          "url": "https://access.redhat.com/errata/RHSA-2026:24755"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24983",
          "url": "https://access.redhat.com/errata/RHSA-2026:24983"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:25015",
          "url": "https://access.redhat.com/errata/RHSA-2026:25015"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26174",
          "url": "https://access.redhat.com/errata/RHSA-2026:26174"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26268",
          "url": "https://access.redhat.com/errata/RHSA-2026:26268"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26269",
          "url": "https://access.redhat.com/errata/RHSA-2026:26269"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26270",
          "url": "https://access.redhat.com/errata/RHSA-2026:26270"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26521",
          "url": "https://access.redhat.com/errata/RHSA-2026:26521"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26536",
          "url": "https://access.redhat.com/errata/RHSA-2026:26536"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26539",
          "url": "https://access.redhat.com/errata/RHSA-2026:26539"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-8090",
          "url": "https://access.redhat.com/security/cve/CVE-2026-8090"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2467709",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467709"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8090.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8090.json"
        }
      ],
      "release_date": "2026-05-07T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-05-07T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-6206",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "description",
          "text": "The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6206"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1857430",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1857430"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5561",
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-52/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        }
      ],
      "release_date": "2023-11-21T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-11-21T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-6604",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6604"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1748105%2C1837550%2C1884266",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1748105%2C1837550%2C1884266"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-30/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-31/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-25742",
      "notes": [
        {
          "category": "description",
          "text": "When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-25742"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1813424",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1813424"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-05/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-06/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-06/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-07/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-2616",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects Firefox ESR < 115.9 and Thunderbird < 115.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-2616"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846197",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846197"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-14/"
        }
      ],
      "release_date": "2024-03-19T12:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-03-19T12:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 2.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ]
    },
    {
      "cve": "CVE-2025-8034",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8034"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970422",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970422"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-57/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-57/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-62/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html"
        }
      ],
      "release_date": "2025-07-22T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-07-22T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-11696",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "notes": [
        {
          "category": "description",
          "text": "The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signature validation for unrelated add-ons may have been bypassed.  Signature validation in this context is used to ensure that third-party applications on the user's computer have not tampered with the user's extensions, limiting the impact of this issue. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11696"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1929600",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1929600"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-64/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-64/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-68/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-68/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00029.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00029.html"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-1937",
      "cwe": {
        "id": "CWE-1260",
        "name": "Improper Handling of Overlap Between Protected Memory Ranges"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1937"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1938471%2C1940716",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1938471%2C1940716"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-17/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-18/"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2025/03/10/6",
          "url": "http://www.openwall.com/lists/oss-security/2025/03/10/6"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html"
        }
      ],
      "release_date": "2025-03-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-03-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-25752",
      "notes": [
        {
          "category": "description",
          "text": "When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-25752"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811627",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811627"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-09/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-09/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-10/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-11/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-0884",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0884"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2003588",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2003588"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-03/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-05/"
        }
      ],
      "release_date": "2026-01-13T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-01-13T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-2789",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2789"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2015179",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2015179"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-17/"
        }
      ],
      "release_date": "2026-02-24T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-02-24T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2026-8094",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code ('Code Injection')"
      },
      "notes": [
        {
          "category": "description",
          "text": "Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-8094"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2035939",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2035939"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-41/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-41/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-44/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-44/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:19160",
          "url": "https://access.redhat.com/errata/RHSA-2026:19160"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:20566",
          "url": "https://access.redhat.com/errata/RHSA-2026:20566"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:20574",
          "url": "https://access.redhat.com/errata/RHSA-2026:20574"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:21381",
          "url": "https://access.redhat.com/errata/RHSA-2026:21381"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:22325",
          "url": "https://access.redhat.com/errata/RHSA-2026:22325"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:22643",
          "url": "https://access.redhat.com/errata/RHSA-2026:22643"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24508",
          "url": "https://access.redhat.com/errata/RHSA-2026:24508"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24509",
          "url": "https://access.redhat.com/errata/RHSA-2026:24509"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24510",
          "url": "https://access.redhat.com/errata/RHSA-2026:24510"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24511",
          "url": "https://access.redhat.com/errata/RHSA-2026:24511"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24516",
          "url": "https://access.redhat.com/errata/RHSA-2026:24516"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24755",
          "url": "https://access.redhat.com/errata/RHSA-2026:24755"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:24983",
          "url": "https://access.redhat.com/errata/RHSA-2026:24983"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:25015",
          "url": "https://access.redhat.com/errata/RHSA-2026:25015"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26174",
          "url": "https://access.redhat.com/errata/RHSA-2026:26174"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26268",
          "url": "https://access.redhat.com/errata/RHSA-2026:26268"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26269",
          "url": "https://access.redhat.com/errata/RHSA-2026:26269"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26270",
          "url": "https://access.redhat.com/errata/RHSA-2026:26270"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26521",
          "url": "https://access.redhat.com/errata/RHSA-2026:26521"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26536",
          "url": "https://access.redhat.com/errata/RHSA-2026:26536"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26539",
          "url": "https://access.redhat.com/errata/RHSA-2026:26539"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-8094",
          "url": "https://access.redhat.com/security/cve/CVE-2026-8094"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2467706",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467706"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8094.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8094.json"
        }
      ],
      "release_date": "2026-05-07T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-05-07T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-4768",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "notes": [
        {
          "category": "description",
          "text": "A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-4768"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1886082",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1886082"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-21/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-21/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-23/"
        }
      ],
      "release_date": "2024-05-14T18:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-05-14T18:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-12289",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "description",
          "text": "Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-12289"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2023443",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2023443"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-57/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-57/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-59/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-60/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-60/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-61/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:27717",
          "url": "https://access.redhat.com/errata/RHSA-2026:27717"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:27733",
          "url": "https://access.redhat.com/errata/RHSA-2026:27733"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:27734",
          "url": "https://access.redhat.com/errata/RHSA-2026:27734"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:29940",
          "url": "https://access.redhat.com/errata/RHSA-2026:29940"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:30846",
          "url": "https://access.redhat.com/errata/RHSA-2026:30846"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:33445",
          "url": "https://access.redhat.com/errata/RHSA-2026:33445"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:36100",
          "url": "https://access.redhat.com/errata/RHSA-2026:36100"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:36101",
          "url": "https://access.redhat.com/errata/RHSA-2026:36101"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:36102",
          "url": "https://access.redhat.com/errata/RHSA-2026:36102"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:36103",
          "url": "https://access.redhat.com/errata/RHSA-2026:36103"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:37210",
          "url": "https://access.redhat.com/errata/RHSA-2026:37210"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:37391",
          "url": "https://access.redhat.com/errata/RHSA-2026:37391"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:38506",
          "url": "https://access.redhat.com/errata/RHSA-2026:38506"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:38750",
          "url": "https://access.redhat.com/errata/RHSA-2026:38750"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:38751",
          "url": "https://access.redhat.com/errata/RHSA-2026:38751"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:38753",
          "url": "https://access.redhat.com/errata/RHSA-2026:38753"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:39011",
          "url": "https://access.redhat.com/errata/RHSA-2026:39011"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:39141",
          "url": "https://access.redhat.com/errata/RHSA-2026:39141"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:39142",
          "url": "https://access.redhat.com/errata/RHSA-2026:39142"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:39428",
          "url": "https://access.redhat.com/errata/RHSA-2026:39428"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:39706",
          "url": "https://access.redhat.com/errata/RHSA-2026:39706"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-12289",
          "url": "https://access.redhat.com/security/cve/CVE-2026-12289"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2489229",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489229"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12289.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12289.json"
        }
      ],
      "release_date": "2026-06-16T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-06-16T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-10536",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "description",
          "text": "Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-10536"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1981502",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1981502"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-73/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-75/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-77/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-78/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/09/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html"
        }
      ],
      "release_date": "2025-09-16T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-09-16T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.4,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ]
    },
    {
      "cve": "CVE-2023-25728",
      "notes": [
        {
          "category": "description",
          "text": "The <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-25728"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1790345",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1790345"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-05/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-06/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-06/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-07/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-9394",
      "notes": [
        {
          "category": "description",
          "text": "An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin.  This could allow them to access cross-origin JSON content. This access is limited to \"same site\" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-9394"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1918874",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1918874"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-47/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-48/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-48/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00004.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00004.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00006.html"
        }
      ],
      "release_date": "2024-10-01T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-01T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-10461",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
      },
      "notes": [
        {
          "category": "description",
          "text": "In multipart/x-mixed-replace responses, `Content-Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-10461"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1914521",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1914521"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-59/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html"
        }
      ],
      "release_date": "2024-10-29T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-29T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-0818",
      "cwe": {
        "id": "CWE-116",
        "name": "Improper Encoding or Escaping of Output"
      },
      "notes": [
        {
          "category": "description",
          "text": "When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email that was formatted and styled with HTML and CSS, then the decrypted contents were rendered in a context in which the CSS styles from the outer messages were active. If the user had additionally allowed loading of the remote content referenced by the outer email message, and the email was crafted by the sender using a combination of CSS rules and fonts and animations, then it was possible to extract the secret contents of the email. This vulnerability was fixed in Thunderbird 147.0.1 and Thunderbird 140.7.1.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0818"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1881530",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1881530"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-07/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-08/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-08/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2026/02/msg00005.html",
          "url": "https://lists.debian.org/debian-lts-announce/2026/02/msg00005.html"
        }
      ],
      "release_date": "2026-01-28T08:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-01-28T08:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2026-4371",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "notes": [
        {
          "category": "description",
          "text": "A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking sensitive data. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-4371"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2023493",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2023493"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-23/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-24/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-24/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:6188",
          "url": "https://access.redhat.com/errata/RHSA-2026:6188"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:6342",
          "url": "https://access.redhat.com/errata/RHSA-2026:6342"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:6917",
          "url": "https://access.redhat.com/errata/RHSA-2026:6917"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8284",
          "url": "https://access.redhat.com/errata/RHSA-2026:8284"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8285",
          "url": "https://access.redhat.com/errata/RHSA-2026:8285"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8286",
          "url": "https://access.redhat.com/errata/RHSA-2026:8286"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8287",
          "url": "https://access.redhat.com/errata/RHSA-2026:8287"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8288",
          "url": "https://access.redhat.com/errata/RHSA-2026:8288"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8289",
          "url": "https://access.redhat.com/errata/RHSA-2026:8289"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8290",
          "url": "https://access.redhat.com/errata/RHSA-2026:8290"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8315",
          "url": "https://access.redhat.com/errata/RHSA-2026:8315"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8850",
          "url": "https://access.redhat.com/errata/RHSA-2026:8850"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-4371",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4371"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2451001",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451001"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4371.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4371.json"
        }
      ],
      "release_date": "2026-03-24T21:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-03-24T21:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-2787",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free in the DOM: Window and Location component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2787"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014560",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014560"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-17/"
        }
      ],
      "release_date": "2026-02-24T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-02-24T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-6607",
      "cwe": {
        "id": "CWE-763",
        "name": "Release of Invalid Pointer or Reference"
      },
      "notes": [
        {
          "category": "description",
          "text": "It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `&lt;select&gt;` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox < 128 and Thunderbird < 128.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6607"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1694513",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1694513"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-6608",
      "notes": [
        {
          "category": "description",
          "text": "It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6608"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1743329",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1743329"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-5171",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-5171"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1851599",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1851599"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html"
        },
        {
          "category": "external",
          "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/",
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5506",
          "url": "https://www.debian.org/security/2023/dsa-5506"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5513",
          "url": "https://www.debian.org/security/2023/dsa-5513"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-41/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-42/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-43/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/"
        }
      ],
      "release_date": "2023-09-27T15:19:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-09-27T15:19:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-6863",
      "notes": [
        {
          "category": "description",
          "text": "The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6863"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1868901",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1868901"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://security.gentoo.org/glsa/202401-10",
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5581",
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-54/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        }
      ],
      "release_date": "2023-12-19T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-12-19T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2022-3032",
      "cwe": {
        "id": "CWE-610",
        "name": "Externally Controlled Reference to a Resource in Another Sphere"
      },
      "notes": [
        {
          "category": "description",
          "text": "When receiving an HTML email that contained an <code>iframe</code> element, which used a <code>srcdoc</code> attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed. This vulnerability affects Thunderbird < 102.2.1 and Thunderbird < 91.13.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2022-3032"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1783831",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1783831"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2022-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2022-38/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2022-39/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2022-39/"
        }
      ],
      "release_date": "2022-12-22T20:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2022-12-22T20:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-3852",
      "cwe": {
        "id": "CWE-386",
        "name": "Symbolic Name not Mapping to Correct Object"
      },
      "notes": [
        {
          "category": "description",
          "text": "GetBoundName could return the wrong version of an object when JIT optimizations were applied. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-3852"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1883542",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1883542"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-18/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-19/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-19/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-20/"
        }
      ],
      "release_date": "2024-04-16T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-04-16T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-11702",
      "cwe": {
        "id": "CWE-838",
        "name": "Inappropriate Encoding for Output Context"
      },
      "notes": [
        {
          "category": "description",
          "text": "Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox < 133 and Thunderbird < 133.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11702"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1918884",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1918884"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-6609",
      "notes": [
        {
          "category": "description",
          "text": "When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox < 128 and Thunderbird < 128.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6609"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1839258",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1839258"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00028.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00028.html"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-4575",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4575"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846689",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846689"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-35/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-35/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-36/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-37/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-37/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/"
        }
      ],
      "release_date": "2023-09-11T09:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-09-11T09:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-2788",
      "notes": [
        {
          "category": "description",
          "text": "Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2788"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014824",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014824"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-17/"
        }
      ],
      "release_date": "2026-02-24T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-02-24T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2025-1935",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1935"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1866661",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1866661"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-17/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-18/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html"
        }
      ],
      "release_date": "2025-03-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-03-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-8032",
      "cwe": {
        "id": "CWE-693",
        "name": "Protection Mechanism Failure"
      },
      "notes": [
        {
          "category": "description",
          "text": "XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8032"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1974407",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1974407"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-62/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html"
        }
      ],
      "release_date": "2025-07-22T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-07-22T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-1551",
      "cwe": {
        "id": "CWE-565",
        "name": "Reliance on Cookies without Validation and Integrity Checking"
      },
      "notes": [
        {
          "category": "description",
          "text": "Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well as control part of the response body, they could inject Set-Cookie response headers that would have been honored by the browser. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-1551"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1864385",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1864385"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-05/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-06/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-06/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-07/"
        }
      ],
      "release_date": "2024-02-20T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-02-20T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-32211",
      "notes": [
        {
          "category": "description",
          "text": "A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-32211"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1823379",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1823379"
        },
        {
          "category": "external",
          "summary": "https://security.gentoo.org/glsa/202312-03",
          "url": "https://security.gentoo.org/glsa/202312-03"
        },
        {
          "category": "external",
          "summary": "https://security.gentoo.org/glsa/202401-10",
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-5725",
      "notes": [
        {
          "category": "description",
          "text": "A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-5725"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1845739",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1845739"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5535",
          "url": "https://www.debian.org/security/2023/dsa-5535"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5538",
          "url": "https://www.debian.org/security/2023/dsa-5538"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-45/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-45/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-46/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-47/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-47/"
        }
      ],
      "release_date": "2023-10-25T18:17:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-10-25T18:17:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-3033",
      "cwe": {
        "id": "CWE-73",
        "name": "External Control of File Name or Path"
      },
      "notes": [
        {
          "category": "description",
          "text": "After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded.  \n*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 137 and Thunderbird 137.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-3033"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1950056",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1950056"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-20/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-23/"
        }
      ],
      "release_date": "2025-04-01T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-04-01T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2026-4721",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-4721"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2013762%2C2015291%2C2016591%2C2016661%2C2016664%2C2017303%2C2017894%2C2018090%2C2018196%2C2018379%2C2019112%2C2022090%2C2022243%2C2022351%2C2022478%2C2022676",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=2013762%2C2015291%2C2016591%2C2016661%2C2016664%2C2017303%2C2017894%2C2018090%2C2018196%2C2018379%2C2019112%2C2022090%2C2022243%2C2022351%2C2022478%2C2022676"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-20/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-21/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-21/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-23/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-24/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-24/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5930",
          "url": "https://access.redhat.com/errata/RHSA-2026:5930"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5931",
          "url": "https://access.redhat.com/errata/RHSA-2026:5931"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5932",
          "url": "https://access.redhat.com/errata/RHSA-2026:5932"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:6188",
          "url": "https://access.redhat.com/errata/RHSA-2026:6188"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:6342",
          "url": "https://access.redhat.com/errata/RHSA-2026:6342"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:6917",
          "url": "https://access.redhat.com/errata/RHSA-2026:6917"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7837",
          "url": "https://access.redhat.com/errata/RHSA-2026:7837"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7838",
          "url": "https://access.redhat.com/errata/RHSA-2026:7838"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7839",
          "url": "https://access.redhat.com/errata/RHSA-2026:7839"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7840",
          "url": "https://access.redhat.com/errata/RHSA-2026:7840"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7841",
          "url": "https://access.redhat.com/errata/RHSA-2026:7841"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7842",
          "url": "https://access.redhat.com/errata/RHSA-2026:7842"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7843",
          "url": "https://access.redhat.com/errata/RHSA-2026:7843"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7845",
          "url": "https://access.redhat.com/errata/RHSA-2026:7845"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7858",
          "url": "https://access.redhat.com/errata/RHSA-2026:7858"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8284",
          "url": "https://access.redhat.com/errata/RHSA-2026:8284"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8285",
          "url": "https://access.redhat.com/errata/RHSA-2026:8285"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8286",
          "url": "https://access.redhat.com/errata/RHSA-2026:8286"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8287",
          "url": "https://access.redhat.com/errata/RHSA-2026:8287"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8288",
          "url": "https://access.redhat.com/errata/RHSA-2026:8288"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8289",
          "url": "https://access.redhat.com/errata/RHSA-2026:8289"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8290",
          "url": "https://access.redhat.com/errata/RHSA-2026:8290"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8315",
          "url": "https://access.redhat.com/errata/RHSA-2026:8315"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8427",
          "url": "https://access.redhat.com/errata/RHSA-2026:8427"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8850",
          "url": "https://access.redhat.com/errata/RHSA-2026:8850"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-4721",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4721"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2450711",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450711"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4721.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4721.json"
        }
      ],
      "release_date": "2026-03-24T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-03-24T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-6612",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "description",
          "text": "CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox < 128 and Thunderbird < 128.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6612"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1880374",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1880374"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-4767",
      "cwe": {
        "id": "CWE-459",
        "name": "Incomplete Cleanup"
      },
      "notes": [
        {
          "category": "description",
          "text": "If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-4767"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1878577",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1878577"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-21/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-21/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-23/"
        }
      ],
      "release_date": "2024-05-14T18:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-05-14T18:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-14322",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "description",
          "text": "Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-14322"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1996473",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1996473"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-92/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-93/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-93/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-95/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-96/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "release_date": "2025-12-09T16:17:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-12-09T16:17:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-0547",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird versions from 68 to 102.9.1 were affected by this bug. This vulnerability affects Thunderbird < 102.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-0547"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811298",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811298"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-15/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-3028",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability was fixed in Firefox 137, Firefox ESR 115.22, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-3028"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1941002",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1941002"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-20/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-21/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-21/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-23/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-24/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-24/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/04/msg00005.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00005.html"
        }
      ],
      "release_date": "2025-04-01T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-04-01T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-4692",
      "notes": [
        {
          "category": "description",
          "text": "Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-4692"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2017643",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2017643"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-20/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-21/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-21/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-23/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-24/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-24/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5930",
          "url": "https://access.redhat.com/errata/RHSA-2026:5930"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5931",
          "url": "https://access.redhat.com/errata/RHSA-2026:5931"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:5932",
          "url": "https://access.redhat.com/errata/RHSA-2026:5932"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:6188",
          "url": "https://access.redhat.com/errata/RHSA-2026:6188"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:6342",
          "url": "https://access.redhat.com/errata/RHSA-2026:6342"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:6917",
          "url": "https://access.redhat.com/errata/RHSA-2026:6917"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7837",
          "url": "https://access.redhat.com/errata/RHSA-2026:7837"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7838",
          "url": "https://access.redhat.com/errata/RHSA-2026:7838"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7839",
          "url": "https://access.redhat.com/errata/RHSA-2026:7839"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7840",
          "url": "https://access.redhat.com/errata/RHSA-2026:7840"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7841",
          "url": "https://access.redhat.com/errata/RHSA-2026:7841"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7842",
          "url": "https://access.redhat.com/errata/RHSA-2026:7842"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7843",
          "url": "https://access.redhat.com/errata/RHSA-2026:7843"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7845",
          "url": "https://access.redhat.com/errata/RHSA-2026:7845"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:7858",
          "url": "https://access.redhat.com/errata/RHSA-2026:7858"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8284",
          "url": "https://access.redhat.com/errata/RHSA-2026:8284"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8285",
          "url": "https://access.redhat.com/errata/RHSA-2026:8285"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8286",
          "url": "https://access.redhat.com/errata/RHSA-2026:8286"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8287",
          "url": "https://access.redhat.com/errata/RHSA-2026:8287"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8288",
          "url": "https://access.redhat.com/errata/RHSA-2026:8288"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8289",
          "url": "https://access.redhat.com/errata/RHSA-2026:8289"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8290",
          "url": "https://access.redhat.com/errata/RHSA-2026:8290"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8315",
          "url": "https://access.redhat.com/errata/RHSA-2026:8315"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8427",
          "url": "https://access.redhat.com/errata/RHSA-2026:8427"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:8850",
          "url": "https://access.redhat.com/errata/RHSA-2026:8850"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-4692",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4692"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2450748",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450748"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4692.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4692.json"
        }
      ],
      "release_date": "2026-03-24T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-03-24T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-6601",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "notes": [
        {
          "category": "description",
          "text": "A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6601"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1890748",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1890748"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-30/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-31/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-32206",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-32206"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1824892",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1824892"
        },
        {
          "category": "external",
          "summary": "https://security.gentoo.org/glsa/202312-03",
          "url": "https://security.gentoo.org/glsa/202312-03"
        },
        {
          "category": "external",
          "summary": "https://security.gentoo.org/glsa/202401-10",
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-3889",
      "cwe": {
        "id": "CWE-451",
        "name": "User Interface (UI) Misrepresentation of Critical Information"
      },
      "notes": [
        {
          "category": "description",
          "text": "Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-3889"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2020723",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2020723"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-23/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-24/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-24/"
        }
      ],
      "release_date": "2026-03-24T21:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-03-24T21:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-11709",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-11709"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1989127",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1989127"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-81/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-81/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-82/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-82/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-83/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-83/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-84/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-84/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-85/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-85/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00015.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00015.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00031.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00031.html"
        }
      ],
      "release_date": "2025-10-14T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-10-14T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-2782",
      "notes": [
        {
          "category": "description",
          "text": "Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2782"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2010743",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2010743"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-17/"
        }
      ],
      "release_date": "2026-02-24T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-02-24T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2025-3029",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "notes": [
        {
          "category": "description",
          "text": "A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability was fixed in Firefox 137, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-3029"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1952213",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1952213"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-20/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-23/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-24/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-24/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/04/msg00005.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00005.html"
        }
      ],
      "release_date": "2025-04-01T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-04-01T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-1012",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1012"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1939710",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1939710"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-07/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-08/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-08/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-09/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-09/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-10/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-11/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00005.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00005.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html"
        }
      ],
      "release_date": "2025-02-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-02-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-25751",
      "notes": [
        {
          "category": "description",
          "text": "Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-25751"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1814899",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1814899"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-09/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-09/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-10/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-11/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-4574",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4574"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846688",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846688"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-35/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-35/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-36/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-37/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-37/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/"
        }
      ],
      "release_date": "2023-09-11T09:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-09-11T09:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-1550",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "description",
          "text": "A malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the user's mouse to be re-positioned unexpectedly, which could have led to user confusion and inadvertently granting permissions they did not intend to grant. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-1550"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1860065",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1860065"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-05/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-06/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-06/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-07/"
        }
      ],
      "release_date": "2024-02-20T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-02-20T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-9179",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-9179"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979527",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979527"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-64/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-64/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-65/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-65/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-66/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-66/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-70/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-70/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-71/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-71/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-72/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-72/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html"
        }
      ],
      "release_date": "2025-08-19T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-08-19T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-11704",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path. Under specific conditions, the same symmetric key could have been freed twice, potentially leading to memory corruption. This vulnerability affects Firefox < 133, Thunderbird < 133, Firefox ESR < 128.7, and Thunderbird < 128.7.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11704"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1899402",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1899402"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-09/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-09/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-10/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00005.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00005.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2025-0510",
      "notes": [
        {
          "category": "description",
          "text": "Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vulnerability was fixed in Thunderbird 128.7 and Thunderbird 135.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-0510"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1940570",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1940570"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-10/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-11/"
        }
      ],
      "release_date": "2025-02-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-02-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-8028",
      "cwe": {
        "id": "CWE-1332",
        "name": "Improper Handling of Faults that Lead to Instruction Skips"
      },
      "notes": [
        {
          "category": "description",
          "text": "On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8028"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1971581",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1971581"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-57/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-57/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-62/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html"
        }
      ],
      "release_date": "2025-07-22T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-07-22T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-8091",
      "notes": [
        {
          "category": "description",
          "text": "Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-8091"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2029301",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2029301"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-30/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-30/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-33/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-33/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-36/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-36/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-39/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-39/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-42/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-42/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26174",
          "url": "https://access.redhat.com/errata/RHSA-2026:26174"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26268",
          "url": "https://access.redhat.com/errata/RHSA-2026:26268"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26269",
          "url": "https://access.redhat.com/errata/RHSA-2026:26269"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26270",
          "url": "https://access.redhat.com/errata/RHSA-2026:26270"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26491",
          "url": "https://access.redhat.com/errata/RHSA-2026:26491"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26492",
          "url": "https://access.redhat.com/errata/RHSA-2026:26492"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26493",
          "url": "https://access.redhat.com/errata/RHSA-2026:26493"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26521",
          "url": "https://access.redhat.com/errata/RHSA-2026:26521"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26536",
          "url": "https://access.redhat.com/errata/RHSA-2026:26536"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26539",
          "url": "https://access.redhat.com/errata/RHSA-2026:26539"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26551",
          "url": "https://access.redhat.com/errata/RHSA-2026:26551"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26606",
          "url": "https://access.redhat.com/errata/RHSA-2026:26606"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26629",
          "url": "https://access.redhat.com/errata/RHSA-2026:26629"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:26630",
          "url": "https://access.redhat.com/errata/RHSA-2026:26630"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:27715",
          "url": "https://access.redhat.com/errata/RHSA-2026:27715"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-8091",
          "url": "https://access.redhat.com/security/cve/CVE-2026-8091"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2467699",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467699"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8091.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8091.json"
        }
      ],
      "release_date": "2026-05-07T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-05-07T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-1546",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "description",
          "text": "When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-1546"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843752",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843752"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-05/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-06/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-06/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-07/"
        }
      ],
      "release_date": "2024-02-20T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-02-20T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-1013",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1013"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1932555",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1932555"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-07/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-09/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-09/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-10/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-11/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html"
        }
      ],
      "release_date": "2025-02-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-02-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-10467",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-10467"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1829029%2C1888538%2C1900394%2C1904059%2C1917742%2C1919809%2C1923706",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1829029%2C1888538%2C1900394%2C1904059%2C1917742%2C1919809%2C1923706"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-59/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html"
        }
      ],
      "release_date": "2024-10-29T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-29T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-1010",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1010"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1936982",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1936982"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-07/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-08/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-08/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-09/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-09/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-10/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-11/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00005.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00005.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html"
        }
      ],
      "release_date": "2025-02-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-02-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-5169",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-5169"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846685",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846685"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html"
        },
        {
          "category": "external",
          "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/",
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5506",
          "url": "https://www.debian.org/security/2023/dsa-5506"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5513",
          "url": "https://www.debian.org/security/2023/dsa-5513"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-41/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-42/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-43/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/"
        }
      ],
      "release_date": "2023-09-27T15:19:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-09-27T15:19:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-0890",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "notes": [
        {
          "category": "description",
          "text": "Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0890"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2005081",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2005081"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-03/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-05/"
        }
      ],
      "release_date": "2026-01-13T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-01-13T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.4,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ]
    },
    {
      "cve": "CVE-2026-2786",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2786"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2013612",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2013612"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-17/"
        }
      ],
      "release_date": "2026-02-24T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-02-24T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-11705",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "description",
          "text": "`NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading to crashes. This behavior conflicted with the PKCS#11 v3.0 specification, which allows `phKey` to be NULL for certain mechanisms. This vulnerability affects Firefox < 133 and Thunderbird < 133.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11705"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1921768",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1921768"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-0751",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "description",
          "text": "A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-0751"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1865689",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1865689"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-04/"
        }
      ],
      "release_date": "2024-01-23T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-01-23T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-2772",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2772"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014827",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014827"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-17/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3338",
          "url": "https://access.redhat.com/errata/RHSA-2026:3338"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3339",
          "url": "https://access.redhat.com/errata/RHSA-2026:3339"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3361",
          "url": "https://access.redhat.com/errata/RHSA-2026:3361"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3491",
          "url": "https://access.redhat.com/errata/RHSA-2026:3491"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3492",
          "url": "https://access.redhat.com/errata/RHSA-2026:3492"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3493",
          "url": "https://access.redhat.com/errata/RHSA-2026:3493"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3494",
          "url": "https://access.redhat.com/errata/RHSA-2026:3494"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3495",
          "url": "https://access.redhat.com/errata/RHSA-2026:3495"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3496",
          "url": "https://access.redhat.com/errata/RHSA-2026:3496"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3497",
          "url": "https://access.redhat.com/errata/RHSA-2026:3497"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3515",
          "url": "https://access.redhat.com/errata/RHSA-2026:3515"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3516",
          "url": "https://access.redhat.com/errata/RHSA-2026:3516"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3517",
          "url": "https://access.redhat.com/errata/RHSA-2026:3517"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3976",
          "url": "https://access.redhat.com/errata/RHSA-2026:3976"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3978",
          "url": "https://access.redhat.com/errata/RHSA-2026:3978"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3979",
          "url": "https://access.redhat.com/errata/RHSA-2026:3979"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3980",
          "url": "https://access.redhat.com/errata/RHSA-2026:3980"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3981",
          "url": "https://access.redhat.com/errata/RHSA-2026:3981"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3982",
          "url": "https://access.redhat.com/errata/RHSA-2026:3982"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3983",
          "url": "https://access.redhat.com/errata/RHSA-2026:3983"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3984",
          "url": "https://access.redhat.com/errata/RHSA-2026:3984"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4022",
          "url": "https://access.redhat.com/errata/RHSA-2026:4022"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4152",
          "url": "https://access.redhat.com/errata/RHSA-2026:4152"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4260",
          "url": "https://access.redhat.com/errata/RHSA-2026:4260"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4432",
          "url": "https://access.redhat.com/errata/RHSA-2026:4432"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-2772",
          "url": "https://access.redhat.com/security/cve/CVE-2026-2772"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2442326",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442326"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2772.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2772.json"
        }
      ],
      "release_date": "2026-02-24T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-02-24T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2025-10532",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "description",
          "text": "Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-10532"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979502",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979502"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-73/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-75/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-77/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-78/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/09/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html"
        }
      ],
      "release_date": "2025-09-16T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-09-16T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-6212",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6212"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1658432%2C1820983%2C1829252%2C1856072%2C1856091%2C1859030%2C1860943%2C1862782",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1658432%2C1820983%2C1829252%2C1856072%2C1856091%2C1859030%2C1860943%2C1862782"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5561",
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-52/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        }
      ],
      "release_date": "2023-11-21T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-11-21T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-7522",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "description",
          "text": "Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-7522"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1906727",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1906727"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-33/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-35/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-37/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ],
      "release_date": "2024-08-06T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-08-06T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-1019",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "description",
          "text": "The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1019"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1940162",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1940162"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-07/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-11/"
        }
      ],
      "release_date": "2025-02-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-02-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-1014",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1014"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1940804",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1940804"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-07/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-09/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-09/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-10/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-11/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html"
        }
      ],
      "release_date": "2025-02-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-02-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-2790",
      "notes": [
        {
          "category": "description",
          "text": "Same-origin policy bypass in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2790"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2008426",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2008426"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-17/"
        }
      ],
      "release_date": "2026-02-24T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-02-24T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-6602",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code ('Code Injection')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6602"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895032",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895032"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-30/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-31/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00028.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00028.html"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-9398",
      "notes": [
        {
          "category": "description",
          "text": "By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-9398"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1881037",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1881037"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-47/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ],
      "release_date": "2024-10-01T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-01T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-7526",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "notes": [
        {
          "category": "description",
          "text": "ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-7526"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1910306",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1910306"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-33/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-35/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-37/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ],
      "release_date": "2024-08-06T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-08-06T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-11710",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "description",
          "text": "A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-11710"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1989899",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1989899"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-81/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-81/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-82/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-82/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-83/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-83/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-84/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-84/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-85/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-85/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00015.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00015.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00031.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00031.html"
        }
      ],
      "release_date": "2025-10-14T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-10-14T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-11712",
      "cwe": {
        "id": "CWE-116",
        "name": "Improper Encoding or Escaping of Output"
      },
      "notes": [
        {
          "category": "description",
          "text": "A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-11712"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979536",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1979536"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-81/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-81/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-83/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-83/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-84/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-84/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-85/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-85/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00015.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00015.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00031.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00031.html"
        }
      ],
      "release_date": "2025-10-14T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-10-14T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-2774",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2774"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014883",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014883"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-17/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3338",
          "url": "https://access.redhat.com/errata/RHSA-2026:3338"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3339",
          "url": "https://access.redhat.com/errata/RHSA-2026:3339"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3361",
          "url": "https://access.redhat.com/errata/RHSA-2026:3361"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3491",
          "url": "https://access.redhat.com/errata/RHSA-2026:3491"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3492",
          "url": "https://access.redhat.com/errata/RHSA-2026:3492"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3493",
          "url": "https://access.redhat.com/errata/RHSA-2026:3493"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3494",
          "url": "https://access.redhat.com/errata/RHSA-2026:3494"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3495",
          "url": "https://access.redhat.com/errata/RHSA-2026:3495"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3496",
          "url": "https://access.redhat.com/errata/RHSA-2026:3496"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3497",
          "url": "https://access.redhat.com/errata/RHSA-2026:3497"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3515",
          "url": "https://access.redhat.com/errata/RHSA-2026:3515"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3516",
          "url": "https://access.redhat.com/errata/RHSA-2026:3516"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3517",
          "url": "https://access.redhat.com/errata/RHSA-2026:3517"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3976",
          "url": "https://access.redhat.com/errata/RHSA-2026:3976"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3978",
          "url": "https://access.redhat.com/errata/RHSA-2026:3978"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3979",
          "url": "https://access.redhat.com/errata/RHSA-2026:3979"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3980",
          "url": "https://access.redhat.com/errata/RHSA-2026:3980"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3981",
          "url": "https://access.redhat.com/errata/RHSA-2026:3981"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3982",
          "url": "https://access.redhat.com/errata/RHSA-2026:3982"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3983",
          "url": "https://access.redhat.com/errata/RHSA-2026:3983"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3984",
          "url": "https://access.redhat.com/errata/RHSA-2026:3984"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4022",
          "url": "https://access.redhat.com/errata/RHSA-2026:4022"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4152",
          "url": "https://access.redhat.com/errata/RHSA-2026:4152"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4260",
          "url": "https://access.redhat.com/errata/RHSA-2026:4260"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4432",
          "url": "https://access.redhat.com/errata/RHSA-2026:4432"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-2774",
          "url": "https://access.redhat.com/security/cve/CVE-2026-2774"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2442290",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442290"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2774.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2774.json"
        }
      ],
      "release_date": "2026-02-24T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-02-24T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-10463",
      "cwe": {
        "id": "CWE-203",
        "name": "Observable Discrepancy"
      },
      "notes": [
        {
          "category": "description",
          "text": "Video frames could have been leaked between origins in some situations. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-10463"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1920800",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1920800"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-57/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-57/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-59/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html"
        }
      ],
      "release_date": "2024-10-29T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-29T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-2773",
      "notes": [
        {
          "category": "description",
          "text": "Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2773"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014832",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014832"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-17/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3338",
          "url": "https://access.redhat.com/errata/RHSA-2026:3338"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3339",
          "url": "https://access.redhat.com/errata/RHSA-2026:3339"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3361",
          "url": "https://access.redhat.com/errata/RHSA-2026:3361"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3491",
          "url": "https://access.redhat.com/errata/RHSA-2026:3491"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3492",
          "url": "https://access.redhat.com/errata/RHSA-2026:3492"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3493",
          "url": "https://access.redhat.com/errata/RHSA-2026:3493"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3494",
          "url": "https://access.redhat.com/errata/RHSA-2026:3494"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3495",
          "url": "https://access.redhat.com/errata/RHSA-2026:3495"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3496",
          "url": "https://access.redhat.com/errata/RHSA-2026:3496"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3497",
          "url": "https://access.redhat.com/errata/RHSA-2026:3497"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3515",
          "url": "https://access.redhat.com/errata/RHSA-2026:3515"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3516",
          "url": "https://access.redhat.com/errata/RHSA-2026:3516"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3517",
          "url": "https://access.redhat.com/errata/RHSA-2026:3517"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3976",
          "url": "https://access.redhat.com/errata/RHSA-2026:3976"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3978",
          "url": "https://access.redhat.com/errata/RHSA-2026:3978"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3979",
          "url": "https://access.redhat.com/errata/RHSA-2026:3979"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3980",
          "url": "https://access.redhat.com/errata/RHSA-2026:3980"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3981",
          "url": "https://access.redhat.com/errata/RHSA-2026:3981"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3982",
          "url": "https://access.redhat.com/errata/RHSA-2026:3982"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3983",
          "url": "https://access.redhat.com/errata/RHSA-2026:3983"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3984",
          "url": "https://access.redhat.com/errata/RHSA-2026:3984"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4022",
          "url": "https://access.redhat.com/errata/RHSA-2026:4022"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4152",
          "url": "https://access.redhat.com/errata/RHSA-2026:4152"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4260",
          "url": "https://access.redhat.com/errata/RHSA-2026:4260"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4432",
          "url": "https://access.redhat.com/errata/RHSA-2026:4432"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-2773",
          "url": "https://access.redhat.com/security/cve/CVE-2026-2773"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2442319",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442319"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2773.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2773.json"
        }
      ],
      "release_date": "2026-02-24T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-02-24T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2025-9181",
      "cwe": {
        "id": "CWE-457",
        "name": "Use of Uninitialized Variable"
      },
      "notes": [
        {
          "category": "description",
          "text": "Uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 142, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-9181"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1977130",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1977130"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-64/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-64/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-66/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-66/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-70/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-70/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-71/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-71/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-72/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-72/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html"
        }
      ],
      "release_date": "2025-08-19T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-08-19T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-2608",
      "cwe": {
        "id": "CWE-680",
        "name": "Integer Overflow to Buffer Overflow"
      },
      "notes": [
        {
          "category": "description",
          "text": "`AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-2608"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1880692",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1880692"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-12/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-12/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-14/"
        }
      ],
      "release_date": "2024-03-19T12:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-03-19T12:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-8394",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 128.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-8394"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895737",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1895737"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-43/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-43/"
        }
      ],
      "release_date": "2024-09-06T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-09-06T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-1936",
      "cwe": {
        "id": "CWE-158",
        "name": "Improper Neutralization of Null Byte or NUL Character"
      },
      "notes": [
        {
          "category": "description",
          "text": "jar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content from the archive, but the fake extension after the null was used to determine the type of content. This could have been used to hide code in a web extension disguised as something else like an image. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1936"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1940027",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1940027"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-17/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-18/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html"
        }
      ],
      "release_date": "2025-03-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-03-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-4578",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "description",
          "text": "When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4578"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1839007",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1839007"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-36/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/"
        }
      ],
      "release_date": "2023-09-11T09:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-09-11T09:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-1931",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1931"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1944126",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1944126"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-17/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-18/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html"
        }
      ],
      "release_date": "2025-03-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-03-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-26696",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "notes": [
        {
          "category": "description",
          "text": "Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26696"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1864205",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1864205"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-17/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-18/"
        }
      ],
      "release_date": "2025-03-10T19:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-03-10T19:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2023-37207",
      "cwe": {
        "id": "CWE-470",
        "name": "Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-37207"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1816287",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1816287"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5450",
          "url": "https://www.debian.org/security/2023/dsa-5450"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5451",
          "url": "https://www.debian.org/security/2023/dsa-5451"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-23/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-24/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-24/"
        }
      ],
      "release_date": "2023-07-05T09:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-07-05T09:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-10464",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "description",
          "text": "Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser. This was addressed by introducing rate-limiting to this API. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-10464"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1913000",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1913000"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-59/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html"
        }
      ],
      "release_date": "2024-10-29T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-29T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-4710",
      "notes": [
        {
          "category": "description",
          "text": "Incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-4710"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2016370",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2016370"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-20/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-23/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-24/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-24/"
        }
      ],
      "release_date": "2026-03-24T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-03-24T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2025-1016",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1016"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1936601%2C1936844%2C1937694%2C1938469%2C1939583%2C1940994",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1936601%2C1936844%2C1937694%2C1938469%2C1939583%2C1940994"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-07/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-08/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-08/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-09/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-09/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-10/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-11/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html"
        }
      ],
      "release_date": "2025-02-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-02-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-5691",
      "notes": [
        {
          "category": "description",
          "text": "By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-5691"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1888695",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1888695"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-25/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-25/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-26/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-26/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-28/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-28/"
        }
      ],
      "release_date": "2024-06-11T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-06-11T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-29535",
      "notes": [
        {
          "category": "description",
          "text": "Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-29535"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1820543",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1820543"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-15/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-25730",
      "notes": [
        {
          "category": "description",
          "text": "A background script invoking <code>requestFullscreen</code> and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-25730"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1794622",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1794622"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-05/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-06/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-06/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-07/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-6208",
      "notes": [
        {
          "category": "description",
          "text": "When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard.\n*This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6208"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1855345",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1855345"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5561",
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-52/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        }
      ],
      "release_date": "2023-11-21T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-11-21T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-2769",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2769"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014550",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014550"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-17/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3338",
          "url": "https://access.redhat.com/errata/RHSA-2026:3338"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3339",
          "url": "https://access.redhat.com/errata/RHSA-2026:3339"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3361",
          "url": "https://access.redhat.com/errata/RHSA-2026:3361"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3491",
          "url": "https://access.redhat.com/errata/RHSA-2026:3491"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3492",
          "url": "https://access.redhat.com/errata/RHSA-2026:3492"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3493",
          "url": "https://access.redhat.com/errata/RHSA-2026:3493"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3494",
          "url": "https://access.redhat.com/errata/RHSA-2026:3494"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3495",
          "url": "https://access.redhat.com/errata/RHSA-2026:3495"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3496",
          "url": "https://access.redhat.com/errata/RHSA-2026:3496"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3497",
          "url": "https://access.redhat.com/errata/RHSA-2026:3497"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3515",
          "url": "https://access.redhat.com/errata/RHSA-2026:3515"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3516",
          "url": "https://access.redhat.com/errata/RHSA-2026:3516"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3517",
          "url": "https://access.redhat.com/errata/RHSA-2026:3517"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3976",
          "url": "https://access.redhat.com/errata/RHSA-2026:3976"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3978",
          "url": "https://access.redhat.com/errata/RHSA-2026:3978"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3979",
          "url": "https://access.redhat.com/errata/RHSA-2026:3979"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3980",
          "url": "https://access.redhat.com/errata/RHSA-2026:3980"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3981",
          "url": "https://access.redhat.com/errata/RHSA-2026:3981"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3982",
          "url": "https://access.redhat.com/errata/RHSA-2026:3982"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3983",
          "url": "https://access.redhat.com/errata/RHSA-2026:3983"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:3984",
          "url": "https://access.redhat.com/errata/RHSA-2026:3984"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4022",
          "url": "https://access.redhat.com/errata/RHSA-2026:4022"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4152",
          "url": "https://access.redhat.com/errata/RHSA-2026:4152"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4260",
          "url": "https://access.redhat.com/errata/RHSA-2026:4260"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:4432",
          "url": "https://access.redhat.com/errata/RHSA-2026:4432"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-2769",
          "url": "https://access.redhat.com/security/cve/CVE-2026-2769"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2442295",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442295"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2769.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2769.json"
        }
      ],
      "release_date": "2026-02-24T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-02-24T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-6862",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free was identified in the `nsDNSService::Init`.  This issue appears to manifest rarely during start-up. This vulnerability affects Firefox ESR < 115.6 and Thunderbird < 115.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6862"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1868042",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1868042"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "category": "external",
          "summary": "https://security.gentoo.org/glsa/202401-10",
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5581",
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5582",
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-54/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        }
      ],
      "release_date": "2023-12-19T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-12-19T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-6614",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition ('Infinite Loop')"
      },
      "notes": [
        {
          "category": "description",
          "text": "The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird < 128.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6614"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1902983",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1902983"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2026-0886",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0886"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2005658",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2005658"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-03/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-05/"
        }
      ],
      "release_date": "2026-01-13T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-01-13T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-6611",
      "cwe": {
        "id": "CWE-1275",
        "name": "Sensitive Cookie with Improper SameSite Attribute"
      },
      "notes": [
        {
          "category": "description",
          "text": "A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox < 128 and Thunderbird < 128.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6611"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1844827",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1844827"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-10459",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-10459"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1919087",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1919087"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-57/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-57/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-59/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html"
        }
      ],
      "release_date": "2024-10-29T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-29T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-5696",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "By manipulating the text in an `&lt;input&gt;` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-5696"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1896555",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1896555"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-25/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-25/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-26/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-26/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-28/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-28/"
        }
      ],
      "release_date": "2024-06-11T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-06-11T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-1933",
      "notes": [
        {
          "category": "description",
          "text": "On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1933"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1946004",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1946004"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-17/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-18/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html"
        }
      ],
      "release_date": "2025-03-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-03-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-3302",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "description",
          "text": "There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-3302"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1881183",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1881183"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/421644",
          "url": "https://kb.cert.org/vuls/id/421644"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-18/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-19/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-19/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-20/"
        }
      ],
      "release_date": "2024-04-16T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-04-16T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ]
    },
    {
      "cve": "CVE-2026-0879",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-0879"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2004602",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2004602"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-03/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-05/"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:0667",
          "url": "https://access.redhat.com/errata/RHSA-2026:0667"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:0694",
          "url": "https://access.redhat.com/errata/RHSA-2026:0694"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:0924",
          "url": "https://access.redhat.com/errata/RHSA-2026:0924"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1320",
          "url": "https://access.redhat.com/errata/RHSA-2026:1320"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1413",
          "url": "https://access.redhat.com/errata/RHSA-2026:1413"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1414",
          "url": "https://access.redhat.com/errata/RHSA-2026:1414"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1415",
          "url": "https://access.redhat.com/errata/RHSA-2026:1415"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1461",
          "url": "https://access.redhat.com/errata/RHSA-2026:1461"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1462",
          "url": "https://access.redhat.com/errata/RHSA-2026:1462"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1471",
          "url": "https://access.redhat.com/errata/RHSA-2026:1471"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:1487",
          "url": "https://access.redhat.com/errata/RHSA-2026:1487"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2041",
          "url": "https://access.redhat.com/errata/RHSA-2026:2041"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2043",
          "url": "https://access.redhat.com/errata/RHSA-2026:2043"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2044",
          "url": "https://access.redhat.com/errata/RHSA-2026:2044"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2047",
          "url": "https://access.redhat.com/errata/RHSA-2026:2047"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2069",
          "url": "https://access.redhat.com/errata/RHSA-2026:2069"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2070",
          "url": "https://access.redhat.com/errata/RHSA-2026:2070"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2073",
          "url": "https://access.redhat.com/errata/RHSA-2026:2073"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2074",
          "url": "https://access.redhat.com/errata/RHSA-2026:2074"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2220",
          "url": "https://access.redhat.com/errata/RHSA-2026:2220"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2231",
          "url": "https://access.redhat.com/errata/RHSA-2026:2231"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2271",
          "url": "https://access.redhat.com/errata/RHSA-2026:2271"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/errata/RHSA-2026:2286",
          "url": "https://access.redhat.com/errata/RHSA-2026:2286"
        },
        {
          "category": "external",
          "summary": "https://access.redhat.com/security/cve/CVE-2026-0879",
          "url": "https://access.redhat.com/security/cve/CVE-2026-0879"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2428973",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428973"
        },
        {
          "category": "external",
          "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0879.json",
          "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0879.json"
        }
      ],
      "release_date": "2026-01-13T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-01-13T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-4577",
      "notes": [
        {
          "category": "description",
          "text": "When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to entering the function, which could potentially have led to an exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-4577"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1847397",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1847397"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-36/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/"
        }
      ],
      "release_date": "2023-09-11T09:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-09-11T09:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-6610",
      "notes": [
        {
          "category": "description",
          "text": "Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128 and Thunderbird < 128.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6610"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1883396",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1883396"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-5262",
      "cwe": {
        "id": "CWE-415",
        "name": "Double Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 139 and Thunderbird < 128.11.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-5262"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1962421",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1962421"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-45/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-45/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-46/"
        }
      ],
      "release_date": "2025-05-27T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-05-27T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-1549",
      "notes": [
        {
          "category": "description",
          "text": "If a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in user confusion and unexpected granted permissions. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-1549"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1833814",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1833814"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-05/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-06/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-06/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-07/"
        }
      ],
      "release_date": "2024-02-20T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-02-20T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-4718",
      "cwe": {
        "id": "CWE-758",
        "name": "Reliance on Undefined, Unspecified, or Implementation-Defined Behavior"
      },
      "notes": [
        {
          "category": "description",
          "text": "Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-4718"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014864",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014864"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-20/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-23/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-24/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-24/"
        }
      ],
      "release_date": "2026-03-24T13:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-03-24T13:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-11711",
      "cwe": {
        "id": "CWE-591",
        "name": "Sensitive Data Storage in Improperly Locked Memory"
      },
      "notes": [
        {
          "category": "description",
          "text": "There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-11711"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1989978",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1989978"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-81/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-81/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-82/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-82/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-83/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-83/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-84/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-84/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-85/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-85/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00015.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00015.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00031.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00031.html"
        }
      ],
      "release_date": "2025-10-14T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-10-14T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-11695",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "description",
          "text": "A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11695"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1925496",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1925496"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-63/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-64/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-64/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-68/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-68/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00029.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00029.html"
        }
      ],
      "release_date": "2024-11-26T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-26T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-0237",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "notes": [
        {
          "category": "description",
          "text": "The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-0237"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1915257",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1915257"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-05/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html"
        }
      ],
      "release_date": "2025-01-07T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-01-07T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-29548",
      "notes": [
        {
          "category": "description",
          "text": "A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-29548"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1822754",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1822754"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-15/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-5693",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "notes": [
        {
          "category": "description",
          "text": "Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-5693"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1891319",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1891319"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-25/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-25/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-26/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-26/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-28/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-28/"
        }
      ],
      "release_date": "2024-06-11T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-06-11T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-9397",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "description",
          "text": "A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-9397"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1916659",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1916659"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-47/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ],
      "release_date": "2024-10-01T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-01T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-0750",
      "notes": [
        {
          "category": "description",
          "text": "A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-0750"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1863083",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1863083"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-04/"
        }
      ],
      "release_date": "2024-01-23T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-01-23T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-11708",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free in MediaTrackGraphImpl::GetInstance(). This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-11708"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1988931",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1988931"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-81/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-81/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-83/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-83/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-84/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-84/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-85/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-85/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00015.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00015.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00031.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00031.html"
        }
      ],
      "release_date": "2025-10-14T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-10-14T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-8027",
      "cwe": {
        "id": "CWE-457",
        "name": "Use of Uninitialized Variable"
      },
      "notes": [
        {
          "category": "description",
          "text": "On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8027"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1968423",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1968423"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-57/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-57/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-62/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html"
        }
      ],
      "release_date": "2025-07-22T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-07-22T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-1932",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "description",
          "text": "An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1932"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1944313",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1944313"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-17/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-18/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html"
        }
      ],
      "release_date": "2025-03-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-03-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-29536",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-29536"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1821959",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1821959"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-15/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-8035",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8035"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1975961",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1975961"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-62/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html"
        }
      ],
      "release_date": "2025-07-22T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-07-22T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-9393",
      "notes": [
        {
          "category": "description",
          "text": "An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin.  This could allow them to access cross-origin PDF content. This access is limited to \"same site\" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-9393"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1918301",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1918301"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-47/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-48/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-48/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00004.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00004.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00006.html"
        }
      ],
      "release_date": "2024-10-01T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-01T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-0240",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-0240"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1929623",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1929623"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-05/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html"
        }
      ],
      "release_date": "2025-01-07T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-01-07T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-6205",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6205"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1854076",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1854076"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5561",
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-52/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        }
      ],
      "release_date": "2023-11-21T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-11-21T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-5986",
      "cwe": {
        "id": "CWE-451",
        "name": "User Interface (UI) Misrepresentation of Critical Information"
      },
      "notes": [
        {
          "category": "description",
          "text": "A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data (e.g. using /dev/urandom on Linux) or to leak Windows credentials via SMB links when the email is viewed in HTML mode. While user interaction is required to download the .pdf file, visual obfuscation can conceal the download trigger. Viewing the email in HTML mode is enough to load external content. This vulnerability was fixed in Thunderbird 128.11.1 and Thunderbird 139.0.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-5986"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1958580%2C1968012",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1958580%2C1968012"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-50/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/07/msg00002.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00002.html"
        }
      ],
      "release_date": "2025-06-11T12:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-06-11T12:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-0238",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Firefox ESR 115.19, Thunderbird 134, and Thunderbird 128.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-0238"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1915535",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1915535"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-03/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-05/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html"
        }
      ],
      "release_date": "2025-01-07T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-01-07T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2026-2779",
      "notes": [
        {
          "category": "description",
          "text": "Incorrect boundary conditions in the Networking: JAR component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-2779"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1164141",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1164141"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-15/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2026-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2026-17/"
        }
      ],
      "release_date": "2026-02-24T14:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2026-02-24T14:16:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-10462",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "notes": [
        {
          "category": "description",
          "text": "Truncation of a long URL could have allowed origin spoofing in a permission prompt. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-10462"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1920423",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1920423"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-59/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html"
        }
      ],
      "release_date": "2024-10-29T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-29T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-1009",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1009"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1936613",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1936613"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-07/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-08/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-08/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-09/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-09/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-10/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-10/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-11/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-11/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00005.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00005.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html"
        }
      ],
      "release_date": "2025-02-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-02-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2023-25737",
      "notes": [
        {
          "category": "description",
          "text": "An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-25737"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811464",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1811464"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-05/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-06/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-06/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-07/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-5724",
      "notes": [
        {
          "category": "description",
          "text": "Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-5724"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1836705",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1836705"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00037.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00042.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5535",
          "url": "https://www.debian.org/security/2023/dsa-5535"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5538",
          "url": "https://www.debian.org/security/2023/dsa-5538"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-45/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-45/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-46/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-47/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-47/"
        }
      ],
      "release_date": "2023-10-25T18:17:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-10-25T18:17:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-4769",
      "cwe": {
        "id": "CWE-351",
        "name": "Insufficient Type Distinction"
      },
      "notes": [
        {
          "category": "description",
          "text": "When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses.  This could have been abused to learn information cross-origin. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-4769"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1886108",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1886108"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-21/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-21/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-22/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-22/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-23/"
        }
      ],
      "release_date": "2024-05-14T18:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-05-14T18:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-3031",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "description",
          "text": "An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability was fixed in Firefox 137 and Thunderbird 137.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-3031"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1947141",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1947141"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-20/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-23/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-23/"
        }
      ],
      "release_date": "2025-04-01T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-04-01T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-9399",
      "notes": [
        {
          "category": "description",
          "text": "A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-9399"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1907726",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1907726"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-46/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-46/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-47/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-47/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-50/"
        }
      ],
      "release_date": "2024-10-01T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-01T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-3857",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-3857"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1886683",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1886683"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-18/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-19/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-19/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-20/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-20/"
        }
      ],
      "release_date": "2024-04-16T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-04-16T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-9185",
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-9185"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1970154%2C1976782%2C1977166",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1970154%2C1976782%2C1977166"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-64/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-64/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-65/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-65/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-66/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-66/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-67/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-67/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-70/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-70/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-71/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-71/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-72/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-72/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html"
        }
      ],
      "release_date": "2025-08-19T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-08-19T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-7521",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "description",
          "text": "Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-7521"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1904644",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1904644"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-33/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-33/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-34/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-34/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-35/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-35/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-37/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-37/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-38/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-38/"
        }
      ],
      "release_date": "2024-08-06T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-08-06T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-6600",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "description",
          "text": "Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-6600"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1888340",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1888340"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-29/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-29/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-30/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-30/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-31/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-31/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-32/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-32/"
        }
      ],
      "release_date": "2024-07-09T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-07-09T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2023-23602",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "description",
          "text": "A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored. This could lead to connections to restricted origins from inside WebWorkers. This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-23602"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1800890",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1800890"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-03/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-10528",
      "cwe": {
        "id": "CWE-693",
        "name": "Protection Mechanism Failure"
      },
      "notes": [
        {
          "category": "description",
          "text": "Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-10528"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1986185",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1986185"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-73/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-75/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-77/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-78/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/09/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html"
        }
      ],
      "release_date": "2025-09-16T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-09-16T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-6204",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "description",
          "text": "On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6204"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1841050",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1841050"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5561",
          "url": "https://www.debian.org/security/2023/dsa-5561"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-49/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-49/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-50/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-50/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-52/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-52/"
        }
      ],
      "release_date": "2023-11-21T15:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-11-21T15:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-14329",
      "notes": [
        {
          "category": "description",
          "text": "Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-14329"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1997018",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1997018"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-92/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-95/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-96/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "release_date": "2025-12-09T16:17:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-12-09T16:17:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-0242",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Firefox ESR 115.19, Thunderbird 134, and Thunderbird 128.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-0242"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1874523%2C1926454%2C1931873%2C1932169",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1874523%2C1926454%2C1931873%2C1932169"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-03/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-05/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html"
        }
      ],
      "release_date": "2025-01-07T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-01-07T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-8029",
      "cwe": {
        "id": "CWE-80",
        "name": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"
      },
      "notes": [
        {
          "category": "description",
          "text": "Thunderbird executed `javascript:` URLs when used in `object` and `embed` tags. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-8029"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1928021",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1928021"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-59/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-61/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-62/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-62/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-63/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-63/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html"
        }
      ],
      "release_date": "2025-07-22T21:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-07-22T21:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-6856",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver.  This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6856"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843782",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843782"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "category": "external",
          "summary": "https://security.gentoo.org/glsa/202401-10",
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5581",
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5582",
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-54/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        }
      ],
      "release_date": "2023-12-19T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-12-19T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2023-23599",
      "cwe": {
        "id": "CWE-116",
        "name": "Improper Encoding or Escaping of Output"
      },
      "notes": [
        {
          "category": "description",
          "text": "When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands to be hidden within. This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-23599"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1777800",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1777800"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-03/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-0247",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 134 and Thunderbird 134.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-0247"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1835193%2C1910021%2C1919803%2C1931576%2C1931948%2C1932173",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1835193%2C1910021%2C1919803%2C1931576%2C1931948%2C1932173"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-04/"
        }
      ],
      "release_date": "2025-01-07T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-01-07T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2025-1934",
      "notes": [
        {
          "category": "description",
          "text": "It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-1934"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1942881",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1942881"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-16/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-16/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-17/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-18/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html"
        }
      ],
      "release_date": "2025-03-04T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-03-04T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-29539",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "description",
          "text": "When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-29539"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1784348",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1784348"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-13/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-13/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-14/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-14/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-15/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-15/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-10458",
      "notes": [
        {
          "category": "description",
          "text": "A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Firefox ESR < 115.17, Thunderbird < 128.4, and Thunderbird < 132.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-10458"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1921733",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1921733"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-56/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-57/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-57/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-58/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-58/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-59/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00034.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00001.html"
        }
      ],
      "release_date": "2024-10-29T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-29T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-10529",
      "cwe": {
        "id": "CWE-942",
        "name": "Permissive Cross-domain Security Policy with Untrusted Domains"
      },
      "notes": [
        {
          "category": "description",
          "text": "Same-origin policy bypass in the Layout component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-10529"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970490",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970490"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-73/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-75/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-77/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-78/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/09/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html"
        }
      ],
      "release_date": "2025-09-16T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-09-16T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-10527",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "description",
          "text": "Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-10527"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1984825",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1984825"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-73/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-75/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-75/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-77/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-78/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-78/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/09/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00026.html"
        }
      ],
      "release_date": "2025-09-16T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-09-16T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2024-10468",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"
      },
      "notes": [
        {
          "category": "description",
          "text": "Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash. This vulnerability affects Firefox < 132 and Thunderbird < 132.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-10468"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1914982",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1914982"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-59/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-59/"
        }
      ],
      "release_date": "2024-10-29T13:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-10-29T13:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-14331",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "notes": [
        {
          "category": "description",
          "text": "Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-14331"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=2000218",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2000218"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-92/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-93/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-93/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-95/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-96/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "release_date": "2025-12-09T16:17:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-12-09T16:17:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-23601",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "notes": [
        {
          "category": "description",
          "text": "Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-23601"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1794268",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1794268"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-03/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-03/"
        }
      ],
      "release_date": "2023-06-02T17:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-06-02T17:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-14328",
      "notes": [
        {
          "category": "description",
          "text": "Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-14328"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1996761",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1996761"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-92/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-95/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-96/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "release_date": "2025-12-09T16:17:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-12-09T16:17:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2025-26695",
      "notes": [
        {
          "category": "description",
          "text": "When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-26695"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1883039",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1883039"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-17/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-17/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-18/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-18/"
        }
      ],
      "release_date": "2025-03-10T19:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-03-10T19:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2024-11159",
      "notes": [
        {
          "category": "description",
          "text": "Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird < 128.4.3 and Thunderbird < 132.0.1.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-11159"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1925929",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1925929"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-61/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-61/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-62/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-62/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00017.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00017.html"
        }
      ],
      "release_date": "2024-11-13T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-11-13T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2023-6860",
      "notes": [
        {
          "category": "description",
          "text": "The `VideoBridge` allowed any content process to use textures produced by remote decoders.  This could be abused to escape the sandbox. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2023-6860"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1854669",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1854669"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00020.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html",
          "url": "https://lists.debian.org/debian-lts-announce/2023/12/msg00021.html"
        },
        {
          "category": "external",
          "summary": "https://security.gentoo.org/glsa/202401-10",
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5581",
          "url": "https://www.debian.org/security/2023/dsa-5581"
        },
        {
          "category": "external",
          "summary": "https://www.debian.org/security/2023/dsa-5582",
          "url": "https://www.debian.org/security/2023/dsa-5582"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-54/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-54/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-55/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-55/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2023-56/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-56/"
        }
      ],
      "release_date": "2023-12-19T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2023-12-19T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    },
    {
      "cve": "CVE-2024-1553",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2024-1553"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1855686%2C1867982%2C1871498%2C1872296%2C1873521%2C1873577%2C1873597%2C1873866%2C1874080%2C1874740%2C1875795%2C1875906%2C1876425%2C1878211%2C1878286",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1855686%2C1867982%2C1871498%2C1872296%2C1873521%2C1873577%2C1873597%2C1873866%2C1874080%2C1874740%2C1875795%2C1875906%2C1876425%2C1878211%2C1878286"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html",
          "url": "https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-05/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-06/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-06/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2024-07/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2024-07/"
        }
      ],
      "release_date": "2024-02-20T14:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2024-02-20T14:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2025-0241",
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "notes": [
        {
          "category": "description",
          "text": "When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6.",
          "title": "Vulnerability description"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
        ],
        "known_affected": [
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
          "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2025-0241"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.mozilla.org/show_bug.cgi?id=1933023",
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1933023"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-01/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-01/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-02/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-02/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-04/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-04/"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-05/",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-05/"
        },
        {
          "category": "external",
          "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html",
          "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html"
        }
      ],
      "release_date": "2025-01-07T16:15:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-01T04:56:14.224340Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1785560172"
        },
        {
          "category": "none_available",
          "date": "2025-01-07T16:15:00Z",
          "details": "Affected",
          "product_ids": [
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els1.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els10.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els11.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els13.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els14.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els15.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els16.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els17.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els18.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els19.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els23.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els24.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els25.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els27.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els3.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els4.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els7.x86_64",
            "AlmaLinux-9.2:thunderbird-0:115.4.1-1.el9_2.alma.tuxcare.els9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AlmaLinux-9.2:thunderbird-0:140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    }
  ]
}