This security update addresses multiple high-severity vulnerabilities (CVSS scores 7.3-7.5) in Thunderbird, including memory safety bugs, an information disclosure flaw in the Audio/Video component, and a sandbox escape in WebRTC. Affected versions are Thunderbird prior to 140.10.1 and 150.0.1, as detailed by the NVD data. The fix requires updating to Thunderbird version 140.10.1 or 150.0.1 on Red Hat Enterprise Linux 9.6 Extended Update Support.
红帽产品勘误 RHSA-2026:24721 - Security Advisory 发布： 2026-06-09 已更新： 2026-06-09 RHSA-2026:24721 - Security Advisory 概述 更新的软件包 概述 Important: thunderbird security update 类型/严重性 Security Advisory: Important Red Hat Insights 补丁分析 识别并修复受此公告影响的系统。 查看受影响的系统 标题 An update for thunderbird is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 描述 Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323) firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320) firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322) firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 解决方案 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 受影响的产品 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x 修复 BZ - 2463481 - CVE-2026-7323 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 BZ - 2463483 - CVE-2026-7320 firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component BZ - 2463484 - CVE-2026-7322 firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 BZ - 2463485 - CVE-2026-7321 firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component CVE CVE-2026-7320 CVE-2026-7321 CVE-2026-7322 CVE-2026-7323 参考 https://access.redhat.com/security/updates/classification/#important 备注: 可能有这些软件包的更新版本。 点击软件包名称查看详情。 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.rpm SHA-256: 9ddf57979f5690fe847bb679b554e278fe7246ab3a3646623a8e1bcde63e3d9e x86_64 thunderbird-140.10.1-1.el9_6.x86_64.rpm SHA-256: c5ac7f699819d1bdf28e8501f5b65d8b23919f141e49c0a8fc5a78ca3691f727 thunderbird-debuginfo-140.10.1-1.el9_6.x86_64.rpm SHA-256: a548024f209b17fabf4fcf2c97906f97608aee58d0e8a15b8c619fbc437243b3 thunderbird-debugsource-140.10.1-1.el9_6.x86_64.rpm SHA-256: 05a5a3ac4172a4fbe23cac61fa6d24593f737ae7e75aa068a76a5f990581ebbf Red Hat Enterprise Linux Server - AUS 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.rpm SHA-256: 9ddf57979f5690fe847bb679b554e278fe7246ab3a3646623a8e1bcde63e3d9e x86_64 thunderbird-140.10.1-1.el9_6.x86_64.rpm SHA-256: c5ac7f699819d1bdf28e8501f5b65d8b23919f141e49c0a8fc5a78ca3691f727 thunderbird-debuginfo-140.10.1-1.el9_6.x86_64.rpm SHA-256: a548024f209b17fabf4fcf2c97906f97608aee58d0e8a15b8c619fbc437243b3 thunderbird-debugsource-140.10.1-1.el9_6.x86_64.rpm SHA-256: 05a5a3ac4172a4fbe23cac61fa6d24593f737ae7e75aa068a76a5f990581ebbf Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.rpm SHA-256: 9ddf57979f5690fe847bb679b554e278fe7246ab3a3646623a8e1bcde63e3d9e s390x thunderbird-140.10.1-1.el9_6.s390x.rpm SHA-256: 95abfd8ba124b90c3299e857317520adbea3962a2291e5fe664516efac8a54c1 thunderbird-debuginfo-140.10.1-1.el9_6.s390x.rpm SHA-256: 0b24775cff7ecdf5018f4baf9d6823e3615bd82e69d4a529afba8d9b61cbd8c4 thunderbird-debugsource-140.10.1-1.el9_6.s390x.rpm SHA-256: 984046f1829a0505951292b096a4d9aae90da63e6099111981822fdad113f0b2 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.rpm SHA-256: 9ddf57979f5690fe847bb679b554e278fe7246ab3a3646623a8e1bcde63e3d9e ppc64le thunderbird-140.10.1-1.el9_6.ppc64le.rpm SHA-256: 2b348c3d5b8cd82c79a02ffe95d74dc80bab52ca5b9767f9da137aafaff3ca60 thunderbird-debuginfo-140.10.1-1.el9_6.ppc64le.rpm SHA-256: de4bd2924a1f1f0a9e0d86ee3db4fabe426035650873c1a39d11ff1aff038e71 thunderbird-debugsource-140.10.1-1.el9_6.ppc64le.rpm SHA-256: 8b365e06e2582162b3a55138c560d036b6a0ec3235cfd997505cba4a204076e3 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.rpm SHA-256: 9ddf57979f5690fe847bb679b554e278fe7246ab3a3646623a8e1bcde63e3d9e aarch64 thunderbird-140.10.1-1.el9_6.aarch64.rpm SHA-256: d8d8c1c825b89d660486018bc2fbd4be18998337274c85ba36a4f939790f7002 thunderbird-debuginfo-140.10.1-1.el9_6.aarch64.rpm SHA-256: 1781fe0189773f9608fe43972126a19f85f9acbffab0ba03ada2ee8887e1518c thunderbird-debugsource-140.10.1-1.el9_6.aarch64.rpm SHA-256: fc16a0ececc6ee09084536bc70f7a72c0c998a696f4a8d2860f2c79ebdb64c99 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.rpm SHA-256: 9ddf57979f5690fe847bb679b554e278fe7246ab3a3646623a8e1bcde63e3d9e ppc64le thunderbird-140.10.1-1.el9_6.ppc64le.rpm SHA-256: 2b348c3d5b8cd82c79a02ffe95d74dc80bab52ca5b9767f9da137aafaff3ca60 thunderbird-debuginfo-140.10.1-1.el9_6.ppc64le.rpm SHA-256: de4bd2924a1f1f0a9e0d86ee3db4fabe426035650873c1a39d11ff1aff038e71 thunderbird-debugsource-140.10.1-1.el9_6.ppc64le.rpm SHA-256: 8b365e06e2582162b3a55138c560d036b6a0ec3235cfd997505cba4a204076e3 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.rpm SHA-256: 9ddf57979f5690fe847bb679b554e278fe7246ab3a3646623a8e1bcde63e3d9e x86_64 thunderbird-140.10.1-1.el9_6.x86_64.rpm SHA-256: c5ac7f699819d1bdf28e8501f5b65d8b23919f141e49c0a8fc5a78ca3691f727 thunderbird-debuginfo-140.10.1-1.el9_6.x86_64.rpm SHA-256: a548024f209b17fabf4fcf2c97906f97608aee58d0e8a15b8c619fbc437243b3 thunderbird-debugsource-140.10.1-1.el9_6.x86_64.rpm SHA-256: 05a5a3ac4172a4fbe23cac61fa6d24593f737ae7e75aa068a76a5f990581ebbf Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.rpm SHA-256: 9ddf57979f5690fe847bb679b554e278fe7246ab3a3646623a8e1bcde63e3d9e aarch64 thunderbird-140.10.1-1.el9_6.aarch64.rpm SHA-256: d8d8c1c825b89d660486018bc2fbd4be18998337274c85ba36a4f939790f7002 thunderbird-debuginfo-140.10.1-1.el9_6.aarch64.rpm SHA-256: 1781fe0189773f9608fe43972126a19f85f9acbffab0ba03ada2ee8887e1518c thunderbird-debugsource-140.10.1-1.el9_6.aarch64.rpm SHA-256: fc16a0ececc6ee09084536bc70f7a72c0c998a696f4a8d2860f2c79ebdb64c99 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.rpm SHA-256: 9ddf57979f5690fe847bb679b554e278fe7246ab3a3646623a8e1bcde63e3d9e s390x thunderbird-140.10.1-1.el9_6.s390x.rpm SHA-256: 95abfd8ba124b90c3299e857317520adbea3962a2291e5fe664516efac8a54c1 thunderbird-debuginfo-140.10.1-1.el9_6.s390x.rpm SHA-256: 0b24775cff7ecdf5018f4baf9d6823e3615bd82e69d4a529afba8d9b61cbd8c4 thunderbird-debugsource-140.10.1-1.el9_6.s390x.rpm SHA-256: 984046f1829a0505951292b096a4d9aae90da63e6099111981822fdad113f0b2 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.rpm SHA-256: 9ddf57979f5690fe847bb679b554e278fe7246ab3a3646623a8e1bcde63e3d9e x86_64 thunderbird-140.10.1-1.el9_6.x86_64.rpm SHA-256: c5ac7f699819d1bdf28e8501f5b65d8b23919f141e49c0a8fc5a78ca3691f727 thunderbird-debuginfo-140.10.1-1.el9_6.x86_64.rpm SHA-256: a548024f209b17fabf4fcf2c97906f97608aee58d0e8a15b8c619fbc437243b3 thunderbird-debugsource-140.10.1-1.el9_6.x86_64.rpm SHA-256: 05a5a3ac4172a4fbe23cac61fa6d24593f737ae7e75aa068a76a5f990581ebbf Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.rpm SHA-256: 9ddf57979f5690fe847bb679b554e278fe7246ab3a3646623a8e1bcde63e3d9e aarch64 thunderbird-140.10.1-1.el9_6.aarch64.rpm SHA-256: d8d8c1c825b89d660486018bc2fbd4be18998337274c85ba36a4f939790f7002 thunderbird-debuginfo-140.10.1-1.el9_6.aarch64.rpm SHA-256: 1781fe0189773f9608fe43972126a19f85f9acbffab0ba03ada2ee8887e1518c thunderbird-debugsource-140.10.1-1.el9_6.aarch64.rpm SHA-256: fc16a0ececc6ee09084536bc70f7a72c0c998a696f4a8d2860f2c79ebdb64c99 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.rpm SHA-256: 9ddf57979f5690fe847bb679b554e278fe7246ab3a3646623a8e1bcde63e3d9e ppc64le thunderbird-140.10.1-1.el9_6.ppc64le.rpm SHA-256: 2b348c3d5b8cd82c79a02ffe95d74dc80bab52ca5b9767f9da137aafaff3ca60 thunderbird-debuginfo-140.10.1-1.el9_6.ppc64le.rpm SHA-256: de4bd2924a1f1f0a9e0d86ee3db4fabe426035650873c1a39d11ff1aff038e71 thunderbird-debugsource-140.10.1-1.el9_6.ppc64le.rpm SHA-256: 8b365e06e2582162b3a55138c560d036b6a0ec3235cfd997505cba4a204076e3 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 SRPM thunderbird-140.10.1-1.el9_6.src.