GCVE-1988-2026-0385
Vulnerability from gna-1988 – Published: 2026-10-02 04:57 – Updated: 2026-10-02 04:57
VLAI
EPSS
VEX
Title
[Bugtraq] [slackware-security] mozilla-thunderbird (SSA:2026-247-03)
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] mozilla-thunderbird (SSA:2026-247-03)
New mozilla-thunderbird packages are available for Slackware 15.0 and -current
to fix security issues.
Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz: Upgraded.
This release contains security fixes and improvements.
For more information, see:
https://www.mozilla.org/en-US/thunderbird/140.15.0esr/releasenotes/
https://www.mozilla.org/en-US/security/advisories/mfsa2026-87/
https://www.cve.org/CVERecord?id=CVE-2026-84639
https://www.cve.org/CVERecord?id=CVE-2026-84640
https://www.cve.org/CVERecord?id=CVE-2026-84641
https://www.cve.org/CVERecord?id=CVE-2026-75874
https://www.cve.org/CVERecord?id=CVE-2026-16365
https://www.cve.org/CVERecord?id=CVE-2026-84119
https://www.cve.org/CVERecord?id=CVE-2026-84120
https://www.cve.org/CVERecord?id=CVE-2026-84121
https://www.cve.org/CVERecord?id=CVE-2026-84122
https://www.cve.org/CVERecord?id=CVE-2026-84124
https://www.cve.org/CVERecord?id=CVE-2026-16371
https://www.cve.org/CVERecord?id=CVE-2026-84131
https://www.cve.org/CVERecord?id=CVE-2026-84143
https://www.cve.org/CVERecord?id=CVE-2026-84145
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated package for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz
Updated package for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/mozilla-thunderbird-140.15.0esr-x86_64-1_slack15.0.txz
Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-thunderbird-153.2.0esr-i686-1.txz
Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-thunderbird-153.2.0esr-x86_64-1.txz
MD5 signatures:
+-------------+
Slackware 15.0 package:
9ac4c03b12a2c2a30b53eb280e3f5b60 mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz
Slackware x86_64 15.0 package:
a811488a4dabcefe4c38be0c91628cef mozilla-thunderbird-140.15.0esr-x86_64-1_slack15.0.txz
Slackware -current package:
6971cf1422471452bdd6cb9845460d58 xap/mozilla-thunderbird-153.2.0esr-i686-1.txz
Slackware x86_64 -current package:
3613978263e8097b2ee262fccfc4d4c3 xap/mozilla-thunderbird-153.2.0esr-x86_64-1.txz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com
+------------------------------------------------------------------------+
| To leave the slackware-security mailing list: |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
iHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCapuLFRsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjPE9gCeJj1yTj6bdtxltBbm0CCK
6+Q6xR0AnjRYrDmu8E4j8PqvnJsva+l9ZTKQ
=7vuj
-----END PGP SIGNATURE-----
Severity
No CVSS data available.
Assigner
References
21 references
Impacted products
1 product
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Mozilla | SSA:2026-247-03 |
Affected:
unknown
|
guessed |
Relationships
reference
GCVE-1988-2026-0385 (this record)
- related CVE-2026-16365
- related CVE-2026-16371
- related CVE-2026-75874
- related CVE-2026-84119
- related CVE-2026-84120
- related CVE-2026-84121
- related CVE-2026-84122
- related CVE-2026-84124
- related CVE-2026-84131
- related CVE-2026-84143
- related CVE-2026-84145
- related CVE-2026-84639
- related CVE-2026-84640
- related CVE-2026-84641
{
"containers": {
"cna": {
"affected": [
{
"product": "SSA:2026-247-03",
"vendor": "Mozilla",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Slackware Security Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n[slackware-security] mozilla-thunderbird (SSA:2026-247-03)\nNew mozilla-thunderbird packages are available for Slackware 15.0 and -current\nto fix security issues.\nHere are the details from the Slackware 15.0 ChangeLog:\n+--------------------------+\npatches/packages/mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz: Upgraded.\nThis release contains security fixes and improvements.\nFor more information, see:\nhttps://www.mozilla.org/en-US/thunderbird/140.15.0esr/releasenotes/\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2026-87/\nhttps://www.cve.org/CVERecord?id=CVE-2026-84639\nhttps://www.cve.org/CVERecord?id=CVE-2026-84640\nhttps://www.cve.org/CVERecord?id=CVE-2026-84641\nhttps://www.cve.org/CVERecord?id=CVE-2026-75874\nhttps://www.cve.org/CVERecord?id=CVE-2026-16365\nhttps://www.cve.org/CVERecord?id=CVE-2026-84119\nhttps://www.cve.org/CVERecord?id=CVE-2026-84120\nhttps://www.cve.org/CVERecord?id=CVE-2026-84121\nhttps://www.cve.org/CVERecord?id=CVE-2026-84122\nhttps://www.cve.org/CVERecord?id=CVE-2026-84124\nhttps://www.cve.org/CVERecord?id=CVE-2026-16371\nhttps://www.cve.org/CVERecord?id=CVE-2026-84131\nhttps://www.cve.org/CVERecord?id=CVE-2026-84143\nhttps://www.cve.org/CVERecord?id=CVE-2026-84145\n(* Security fix *)\n+--------------------------+\nWhere to find the new packages:\n+-----------------------------+\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project! :-)\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you.\nUpdated package for Slackware 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz\nUpdated package for Slackware x86_64 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/mozilla-thunderbird-140.15.0esr-x86_64-1_slack15.0.txz\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-thunderbird-153.2.0esr-i686-1.txz\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-thunderbird-153.2.0esr-x86_64-1.txz\nMD5 signatures:\n+-------------+\nSlackware 15.0 package:\n9ac4c03b12a2c2a30b53eb280e3f5b60 mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz\nSlackware x86_64 15.0 package:\na811488a4dabcefe4c38be0c91628cef mozilla-thunderbird-140.15.0esr-x86_64-1_slack15.0.txz\nSlackware -current package:\n6971cf1422471452bdd6cb9845460d58 xap/mozilla-thunderbird-153.2.0esr-i686-1.txz\nSlackware x86_64 -current package:\n3613978263e8097b2ee262fccfc4d4c3 xap/mozilla-thunderbird-153.2.0esr-x86_64-1.txz\nInstallation instructions:\n+------------------------+\nUpgrade the package as root:\n# upgradepkg mozilla-thunderbird-140.15.0esr-i686-1_slack15.0.txz\n+-----+\nSlackware Linux Security Team\nhttp://slackware.com/gpg-key\nsecurity@slackware.com\n+------------------------------------------------------------------------+\n| To leave the slackware-security mailing list: |\n+------------------------------------------------------------------------+\n| Send an email to majordomo@slackware.com with this text in the body of |\n| the email message: |\n| |\n| unsubscribe slackware-security |\n| |\n| You will get a confirmation message back containing instructions to |\n| complete the process. Please do not reply to this email address. |\n+------------------------------------------------------------------------+\n-----BEGIN PGP SIGNATURE-----\niHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCapuLFRsUgAAAAAAEAA5t\nYW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjPE9gCeJj1yTj6bdtxltBbm0CCK\n6+Q6xR0AnjRYrDmu8E4j8PqvnJsva+l9ZTKQ\n=7vuj\n-----END PGP SIGNATURE-----"
}
],
"providerMetadata": {
"dateUpdated": "2026-10-02T04:57:25Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/item/8b72bf587cba7f8dc73503651f28087d4c53a018ac82c2221cfe83a0b7cd2b9e"
},
{
"tags": [
"technical-description"
],
"url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/JYNQFMIDK5N7ZLAPOX57ZLFBTORAYTOP/"
},
{
"url": "http://osuosl.org"
},
{
"url": "http://slackware.com"
},
{
"url": "http://slackware.com/gpg-key"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16365"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16371"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75874"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84119"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84120"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84121"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84122"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84124"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84131"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84143"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84145"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84639"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84640"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84641"
},
{
"url": "https://www.mozilla.org/en-US/security/advisories/mfsa2026-87/"
},
{
"url": "https://www.mozilla.org/en-US/thunderbird/140.15.0esr/releasenotes/"
}
],
"source": {
"defect": [
"alpine.LNX.2.02.2609042059450.26166%40connie.slackware.com"
],
"discovery": "EXTERNAL"
},
"title": "[Bugtraq] [slackware-security] mozilla-thunderbird (SSA:2026-247-03)",
"x_gcve": [
{
"recordType": "reference",
"relationships": [
{
"destId": "CVE-2026-16365",
"type": "related"
},
{
"destId": "CVE-2026-16371",
"type": "related"
},
{
"destId": "CVE-2026-75874",
"type": "related"
},
{
"destId": "CVE-2026-84119",
"type": "related"
},
{
"destId": "CVE-2026-84120",
"type": "related"
},
{
"destId": "CVE-2026-84121",
"type": "related"
},
{
"destId": "CVE-2026-84122",
"type": "related"
},
{
"destId": "CVE-2026-84124",
"type": "related"
},
{
"destId": "CVE-2026-84131",
"type": "related"
},
{
"destId": "CVE-2026-84143",
"type": "related"
},
{
"destId": "CVE-2026-84145",
"type": "related"
},
{
"destId": "CVE-2026-84639",
"type": "related"
},
{
"destId": "CVE-2026-84640",
"type": "related"
},
{
"destId": "CVE-2026-84641",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0385",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/item/8b72bf587cba7f8dc73503651f28087d4c53a018ac82c2221cfe83a0b7cd2b9e",
"automated": true,
"contentSha256": "8b72bf587cba7f8dc73503651f28087d4c53a018ac82c2221cfe83a0b7cd2b9e",
"evidenceScore": 6,
"messageId": "alpine.LNX.2.02.2609042059450.26166%40connie.slackware.com",
"originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/JYNQFMIDK5N7ZLAPOX57ZLFBTORAYTOP/",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-10-02T04:57:25Z"
}
},
{
"recordType": "advisory",
"vulnId": "gcve-1988-2026-0385"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-10-02T04:57:25Z",
"dateUpdated": "2026-10-02T04:57:25Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0385"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…