Red Hat Product Errata RHSA-2026:24717 - Security Advisory Issued: 2026-06-09 Updated: 2026-06-09 RHSA-2026:24717 - Security Advisory Overview Updated Packages Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for thunderbird is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 (CVE-2026-7323) firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component (CVE-2026-7320) firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 (CVE-2026-7322) firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component (CVE-2026-7321) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2463481 - CVE-2026-7323 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.10.1 and Firefox 150.0.1 BZ - 2463483 - CVE-2026-7320 firefox: thunderbird: Information disclosure due to incorrect boundary conditions in the Audio/Video component BZ - 2463484 - CVE-2026-7322 firefox: thunderbird: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1 BZ - 2463485 - CVE-2026-7321 firefox: thunderbird: webrtc: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component CVEs CVE-2026-7320 CVE-2026-7321 CVE-2026-7322 CVE-2026-7323 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 SRPM thunderbird-140.10.1-1.el8_8.src.rpm SHA-256: 3f65839103c739c45fcb645f1940c2fbfd9745ee4b4682cde81530ddf808d2d6 x86_64 thunderbird-140.10.1-1.el8_8.x86_64.rpm SHA-256: acf851967d522b2cf436a6af50e2c48dd1f5e4e2c9fbc8e83c00c1db9bbfd0bc thunderbird-debuginfo-140.10.1-1.el8_8.x86_64.rpm SHA-256: cd076f095201ed7f33bb0290095ed9110e105532768a303c168cf4eb9d3be499 thunderbird-debugsource-140.10.1-1.el8_8.x86_64.rpm SHA-256: 7f026da0083897740a93884b9f9e4fecc22ef9f1660821e264a277e2bce9449f Red Hat Enterprise Linux Server - TUS 8.8 SRPM thunderbird-140.10.1-1.el8_8.src.rpm SHA-256: 3f65839103c739c45fcb645f1940c2fbfd9745ee4b4682cde81530ddf808d2d6 x86_64 thunderbird-140.10.1-1.el8_8.x86_64.rpm SHA-256: acf851967d522b2cf436a6af50e2c48dd1f5e4e2c9fbc8e83c00c1db9bbfd0bc thunderbird-debuginfo-140.10.1-1.el8_8.x86_64.rpm SHA-256: cd076f095201ed7f33bb0290095ed9110e105532768a303c168cf4eb9d3be499 thunderbird-debugsource-140.10.1-1.el8_8.x86_64.rpm SHA-256: 7f026da0083897740a93884b9f9e4fecc22ef9f1660821e264a277e2bce9449f Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM thunderbird-140.10.1-1.el8_8.src.rpm SHA-256: 3f65839103c739c45fcb645f1940c2fbfd9745ee4b4682cde81530ddf808d2d6 ppc64le thunderbird-140.10.1-1.el8_8.ppc64le.rpm SHA-256: 44acc6245582deb5080681eb9d8145dc04fdedb9f494be66b63a2e691aaec76c thunderbird-debuginfo-140.10.1-1.el8_8.ppc64le.rpm SHA-256: 53d399d0357cfa7fb21eeeeef08c2e3fdf735152bb4355954edcb12bb83789fd thunderbird-debugsource-140.10.1-1.el8_8.ppc64le.rpm SHA-256: f8de19b1f6e92d9133f350816ff02abf9e4c2139f62aaf341932b9a9a3fda52f Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM thunderbird-140.10.1-1.el8_8.src.rpm SHA-256: 3f65839103c739c45fcb645f1940c2fbfd9745ee4b4682cde81530ddf808d2d6 x86_64 thunderbird-140.10.1-1.el8_8.x86_64.rpm SHA-256: acf851967d522b2cf436a6af50e2c48dd1f5e4e2c9fbc8e83c00c1db9bbfd0bc thunderbird-debuginfo-140.10.1-1.el8_8.x86_64.rpm SHA-256: cd076f095201ed7f33bb0290095ed9110e105532768a303c168cf4eb9d3be499 thunderbird-debugsource-140.10.1-1.el8_8.x86_64.rpm SHA-256: 7f026da0083897740a93884b9f9e4fecc22ef9f1660821e264a277e2bce9449f The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .