Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Thunderbird Update Fixes Critical Security Flaw

published 9 months ago

Summary

An update is available for Red Hat Thunderbird to fix a critical security issue that could allow an attacker to execute malicious code on your computer. This update is recommended for all users. To stay safe, update your Thunderbird software as soon as possible.

What to do

Update redhat thunderbird to version 0:140.7.0-1.el8_2.
Update redhat thunderbird-debuginfo to version 0:140.7.0-1.el8_2.
Update redhat thunderbird-debugsource to version 0:140.7.0-1.el8_2.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_aus:8.2::appstream	redhat	thunderbird	< 0:140.7.0-1.el8_2 Fix: upgrade to 0:140.7.0-1.el8_2
Red Hat:rhel_aus:8.2::appstream	redhat	thunderbird-debuginfo	< 0:140.7.0-1.el8_2 Fix: upgrade to 0:140.7.0-1.el8_2
Red Hat:rhel_aus:8.2::appstream	redhat	thunderbird-debugsource	< 0:140.7.0-1.el8_2 Fix: upgrade to 0:140.7.0-1.el8_2

Original advisory text

Red Hat Security Advisory: thunderbird security update

References

https://access.redhat.com/errata/RHSA-2026:1471 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420507 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2428961 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2428963 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2428965 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2428966 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2428967 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2428968 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2428969 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2428971 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2428972 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2428973 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2428975 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2428978 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1471.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-14327 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14327 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14327 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2025-14327 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-05/#CVE-2025-14327 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-0877 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0877 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0877 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0877 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-05/#CVE-2026-0877 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-0878 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0878 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0878 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0878 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-05/#CVE-2026-0878 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-0879 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0879 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0879 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0879 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-05/#CVE-2026-0879 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-0880 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0880 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0880 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0880 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-05/#CVE-2026-0880 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-0882 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0882 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0882 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0882 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-05/#CVE-2026-0882 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-0883 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0883 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0883 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0883 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-0884 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0884 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0884 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0884 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-0885 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0885 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0885 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0885 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-05/#CVE-2026-0885 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-0886 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0886 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0886 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0886 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-05/#CVE-2026-0886 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-0887 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0887 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0887 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0887 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-05/#CVE-2026-0887 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-0890 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0890 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0890 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0890 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-05/#CVE-2026-0890 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-0891 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-0891 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-0891 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-03/#CVE-2026-0891 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-05/#CVE-2026-0891 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.5 High

Timeline

Published28 Jan 2026

Updated19 Mar 2026

First seen19 Mar 2026

Sources

RHSA-2026:1471 · OSV

Track software like this

Free during beta