VULNARCHIVE

GCVE-1988-2026-0385

[Bugtraq] [slackware-security] mozilla-thunderbird (SSA:2026-247-03)

Description (en)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security]  mozilla-thunderbird (SSA:2026-247-03)
New mozilla-thunderbird packages are available for Slackware 15.0 and -current
to fix security issues.
Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz:  Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/140.15.0esr/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2026-87/
https://www.cve.org/CVERecord?id=CVE-2026-84639
https://www.cve.org/CVERecord?id=CVE-2026-84640
https://www.cve.org/CVERecord?id=CVE-2026-84641
https://www.cve.org/CVERecord?id=CVE-2026-75874
https://www.cve.org/CVERecord?id=CVE-2026-16365
https://www.cve.org/CVERecord?id=CVE-2026-84119
https://www.cve.org/CVERecord?id=CVE-2026-84120
https://www.cve.org/CVERecord?id=CVE-2026-84121
https://www.cve.org/CVERecord?id=CVE-2026-84122
https://www.cve.org/CVERecord?id=CVE-2026-84124
https://www.cve.org/CVERecord?id=CVE-2026-16371
https://www.cve.org/CVERecord?id=CVE-2026-84131
https://www.cve.org/CVERecord?id=CVE-2026-84143
https://www.cve.org/CVERecord?id=CVE-2026-84145
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!  :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated package for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz
Updated package for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/mozilla-thunderbird-140.15.0esr-x86_64-1_slack15.0.txz
Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-thunderbird-153.2.0esr-i686-1.txz
Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-thunderbird-153.2.0esr-x86_64-1.txz
MD5 signatures:
+-------------+
Slackware 15.0 package:
9ac4c03b12a2c2a30b53eb280e3f5b60  mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz
Slackware x86_64 15.0 package:
a811488a4dabcefe4c38be0c91628cef  mozilla-thunderbird-140.15.0esr-x86_64-1_slack15.0.txz
Slackware -current package:
6971cf1422471452bdd6cb9845460d58  xap/mozilla-thunderbird-153.2.0esr-i686-1.txz
Slackware x86_64 -current package:
3613978263e8097b2ee262fccfc4d4c3  xap/mozilla-thunderbird-153.2.0esr-x86_64-1.txz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com
+------------------------------------------------------------------------+
| To leave the slackware-security mailing list:                          |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message:                                                     |
|                                                                        |
|   unsubscribe slackware-security                                       |
|                                                                        |
| You will get a confirmation message back containing instructions to    |
| complete the process.  Please do not reply to this email address.      |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
iHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCapuLFRsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjPE9gCeJj1yTj6bdtxltBbm0CCK
6+Q6xR0AnjRYrDmu8E4j8PqvnJsva+l9ZTKQ
=7vuj
-----END PGP SIGNATURE-----

References

Raw JSON
{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "SSA:2026-247-03",
          "vendor": "Mozilla",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Slackware Security Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n[slackware-security]  mozilla-thunderbird (SSA:2026-247-03)\nNew mozilla-thunderbird packages are available for Slackware 15.0 and -current\nto fix security issues.\nHere are the details from the Slackware 15.0 ChangeLog:\n+--------------------------+\npatches/packages/mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz:  Upgraded.\nThis release contains security fixes and improvements.\nFor more information, see:\nhttps://www.mozilla.org/en-US/thunderbird/140.15.0esr/releasenotes/\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2026-87/\nhttps://www.cve.org/CVERecord?id=CVE-2026-84639\nhttps://www.cve.org/CVERecord?id=CVE-2026-84640\nhttps://www.cve.org/CVERecord?id=CVE-2026-84641\nhttps://www.cve.org/CVERecord?id=CVE-2026-75874\nhttps://www.cve.org/CVERecord?id=CVE-2026-16365\nhttps://www.cve.org/CVERecord?id=CVE-2026-84119\nhttps://www.cve.org/CVERecord?id=CVE-2026-84120\nhttps://www.cve.org/CVERecord?id=CVE-2026-84121\nhttps://www.cve.org/CVERecord?id=CVE-2026-84122\nhttps://www.cve.org/CVERecord?id=CVE-2026-84124\nhttps://www.cve.org/CVERecord?id=CVE-2026-16371\nhttps://www.cve.org/CVERecord?id=CVE-2026-84131\nhttps://www.cve.org/CVERecord?id=CVE-2026-84143\nhttps://www.cve.org/CVERecord?id=CVE-2026-84145\n(* Security fix *)\n+--------------------------+\nWhere to find the new packages:\n+-----------------------------+\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project!  :-)\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you.\nUpdated package for Slackware 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz\nUpdated package for Slackware x86_64 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/mozilla-thunderbird-140.15.0esr-x86_64-1_slack15.0.txz\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-thunderbird-153.2.0esr-i686-1.txz\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-thunderbird-153.2.0esr-x86_64-1.txz\nMD5 signatures:\n+-------------+\nSlackware 15.0 package:\n9ac4c03b12a2c2a30b53eb280e3f5b60  mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz\nSlackware x86_64 15.0 package:\na811488a4dabcefe4c38be0c91628cef  mozilla-thunderbird-140.15.0esr-x86_64-1_slack15.0.txz\nSlackware -current package:\n6971cf1422471452bdd6cb9845460d58  xap/mozilla-thunderbird-153.2.0esr-i686-1.txz\nSlackware x86_64 -current package:\n3613978263e8097b2ee262fccfc4d4c3  xap/mozilla-thunderbird-153.2.0esr-x86_64-1.txz\nInstallation instructions:\n+------------------------+\nUpgrade the package as root:\n# upgradepkg mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz\n+-----+\nSlackware Linux Security Team\nhttp://slackware.com/gpg-key\nsecurity@slackware.com\n+------------------------------------------------------------------------+\n| To leave the slackware-security mailing list:                          |\n+------------------------------------------------------------------------+\n| Send an email to majordomo@slackware.com with this text in the body of |\n| the email message:                                                     |\n|                                                                        |\n|   unsubscribe slackware-security                                       |\n|                                                                        |\n| You will get a confirmation message back containing instructions to    |\n| complete the process.  Please do not reply to this email address.      |\n+------------------------------------------------------------------------+\n-----BEGIN PGP SIGNATURE-----\niHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCapuLFRsUgAAAAAAEAA5t\nYW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjPE9gCeJj1yTj6bdtxltBbm0CCK\n6+Q6xR0AnjRYrDmu8E4j8PqvnJsva+l9ZTKQ\n=7vuj\n-----END PGP SIGNATURE-----"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T04:57:25Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/item/8b72bf587cba7f8dc73503651f28087d4c53a018ac82c2221cfe83a0b7cd2b9e"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/JYNQFMIDK5N7ZLAPOX57ZLFBTORAYTOP/"
        },
        {
          "url": "http://osuosl.org"
        },
        {
          "url": "http://slackware.com"
        },
        {
          "url": "http://slackware.com/gpg-key"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16365"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16371"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75874"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84119"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84120"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84121"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84122"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84124"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84131"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84143"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84145"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84639"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84640"
        },
        {
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-84641"
        },
        {
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-87/"
        },
        {
          "url": "https://www.mozilla.org/en-US/thunderbird/140.15.0esr/releasenotes/"
        }
      ],
      "source": {
        "defect": [
          "alpine.LNX.2.02.2609042059450.26166%40connie.slackware.com"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "[Bugtraq] [slackware-security] mozilla-thunderbird (SSA:2026-247-03)",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-16365",
              "type": "related"
            },
            {
              "destId": "CVE-2026-16371",
              "type": "related"
            },
            {
              "destId": "CVE-2026-75874",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84119",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84120",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84121",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84122",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84124",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84131",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84143",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84145",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84639",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84640",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84641",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0385",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/item/8b72bf587cba7f8dc73503651f28087d4c53a018ac82c2221cfe83a0b7cd2b9e",
            "automated": true,
            "contentSha256": "8b72bf587cba7f8dc73503651f28087d4c53a018ac82c2221cfe83a0b7cd2b9e",
            "evidenceScore": 6,
            "messageId": "alpine.LNX.2.02.2609042059450.26166%40connie.slackware.com",
            "originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/JYNQFMIDK5N7ZLAPOX57ZLFBTORAYTOP/",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-10-02T04:57:25Z"
          }
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-10-02T04:57:25Z",
    "dateUpdated": "2026-10-02T04:57:25Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0385"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}