{"id":"CVE-2026-84129","aliases":["EUVD-2026-69078","GHSA-vhhv-v3m2-wvqf","MGASA-2026-0387","MGASA-2026-0388","SUSE-SU-2026:23784-1","SUSE-SU-2026:4140-1","SUSE-SU-2026:4156-1","SUSE-SU-2026:4268-1","UBUNTU-CVE-2026-84129","openSUSE-SU-2026:11666-1","openSUSE-SU-2026:11677-1","openSUSE-SU-2026:12098-1","openSUSE-SU-2026:21853-1"],"status":"published","title":"Site isolation issue in the DOM: Navigation component","description":"Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00185,"percentile":0.08146,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-346"],"published":"2026-09-01T12:18:56Z","modified":"2026-10-11T12:45:03Z","affected":[{"source":"osv","ecosystem":"Mageia:10","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-1.mga10"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:10","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-1.mga10"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:10","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.128.0-1.mga10"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:9","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.15.0-1.mga9"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.15.0-1.mga9"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:9","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.128.0-1.mga9"}]}],"bundled":26},{"source":"osv","ecosystem":"Mageia:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-1.mga10"}]}],"bundled":31},{"source":"osv","ecosystem":"Mageia:10","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-1.mga10"}]}],"bundled":31},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.15.0-1.mga9"}]}],"bundled":31},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.15.0-1.mga9"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-160000.1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-160000.1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-118.5.4"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-41.3.8"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-19.39.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-58.147.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-118.5.4"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-41.3.8"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-19.39.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-58.147.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.157.5.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-150400.14.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.157.5.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-150400.14.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.157.5.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-150400.14.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.157.5.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-150400.14.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.157.5.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-150400.14.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.157.5.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-150400.14.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.157.5.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-150400.14.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.157.5.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-150400.14.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.157.5.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-150400.14.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.157.5.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-150400.14.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.157.5.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153-150400.14.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"mozilla-nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.39-150400.12.3.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.125-150400.3.74.1"}]}],"bundled":139},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.13.3.1"}]}],"bundled":143},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-150400.13.3.1"}]}],"bundled":143},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.3.1-0ubuntu3","52.3.1-7fakesync1","52.8.1-0ubuntu0.18.04.1","52.9.1-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mozjs38","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["38.8.0~repack1-0ubuntu1","38.8.0~repack1-0ubuntu3","38.8.0~repack1-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs68","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["68.5.0-1~fakesync","68.5.0-2~fakesync","68.6.0-1","68.6.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mozjs52","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["52.9.1-1build1","52.9.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.11.0-0ubuntu0.22.04.1","102.12.0-0ubuntu0.22.04.1","102.13.0-0ubuntu0.22.04.1","102.15.1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs78","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["78.13.0-1","78.15.0-2","78.15.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mozjs91","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["91.5.1-0ubuntu1","91.6.0-1","91.6.0-2","91.7.0-2","91.10.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:91.1.2+build1-0ubuntu1","1:91.3.0+build2-0ubuntu1","1:91.3.1+build1-0ubuntu1","1:91.3.2+build1-0ubuntu1","1:91.4.0+build1.1-0ubuntu1","1:91.4.0+build2-0ubuntu1","1:91.5.0+build1-0ubuntu1","1:91.5.1+build1-0ubuntu1","1:91.6.1+build1-0ubuntu1","1:91.7.0+build1-0ubuntu1","1:91.7.0+build2-0ubuntu1","1:91.8.0+build2-0ubuntu1","1:91.9.1+build1-0ubuntu0.22.04.1","1:91.11.0+build2-0ubuntu0.22.04.1","1:102.2.2+build1-0ubuntu0.22.04.1","1:102.4.2+build2-0ubuntu0.22.04.1","1:102.7.1+build2-0ubuntu0.22.04.1","1:102.8.0+build2-0ubuntu0.22.04.1","1:102.9.0+build1-0ubuntu0.22.04.1","1:102.10.0+build2-0ubuntu0.22.04.1","1:102.11.0+build1-0ubuntu0.22.04.1","1:102.13.0+build1-0ubuntu0.22.04.1","1:102.15.0+build1-0ubuntu0.22.04.1","1:102.15.1+build1-0ubuntu0.22.04.1","1:115.3.1+build1-0ubuntu0.22.04.2","1:115.4.1+build1-0ubuntu0.22.04.1","1:115.5.0+build1-0ubuntu0.22.04.1","1:115.6.0+build2-0ubuntu0.22.04.1","1:115.8.1+build1-0ubuntu0.22.04.1","1:115.9.0+build1-0ubuntu0.22.04.1","1:115.10.1+build1-0ubuntu0.22.04.1","1:115.11.0+build2-0ubuntu0.22.04.1","1:115.12.0+build3-0ubuntu0.22.04.1","1:115.13.0+build5-0ubuntu0.22.04.1","1:115.15.0+build1-0ubuntu0.22.04.1","1:115.16.0+build2-0ubuntu0.22.04.1","1:115.18.0+build1-0ubuntu0.22.04.1","1:128.12.0+build1-0ubuntu0.22.04.1","1:140.7.1+build1-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs102","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["102.15.1-1","102.15.1-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"mozjs115","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["115.3.0-0ubuntu1","115.4.0-2","115.5.0-1","115.6.0-1","115.7.0-4","115.8.0-1","115.9.0-1","115.9.0-1build1","115.10.0-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-1.1"}]}],"bundled":24},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"155.0-1.1"}]}],"bundled":29},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.4.0-1.1"}]}],"bundled":138},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.2.0-160000.1.1"}]}],"bundled":24}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2055028","tags":["Permissions Required"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-82/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-85/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-86/","tags":["Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-88/","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84129"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-82"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-85"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-86"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-88"},{"url":"https://github.com/advisories/GHSA-vhhv-v3m2-wvqf"},{"url":"https://advisories.mageia.org/MGASA-2026-0387.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36235","tags":["report"]},{"url":"https://firefox-source-docs.mozilla.org/security/nss/releases/nss_3_128.html","tags":["web"]},{"url":"https://www.firefox.com/en-US/firefox/140.15.0/releasenotes/","tags":["web"]},{"url":"https://www.firefox.com/en-US/firefox/153.2.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-84/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-85/","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0388.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36245","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/140.14.1esr/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/153.1.1esr/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/140.15.0esr/releasenotes/","tags":["web"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/153.2.0esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-87/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-88/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623784-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1278001","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-75874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84145","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264140-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1262698","tags":["report"]},{"url":"https://bugzilla.suse.com/1262701","tags":["report"]},{"url":"https://bugzilla.suse.com/1266262","tags":["report"]},{"url":"https://bugzilla.suse.com/1266263","tags":["report"]},{"url":"https://bugzilla.suse.com/1271649","tags":["report"]},{"url":"https://bugzilla.suse.com/1272772","tags":["report"]},{"url":"https://bugzilla.suse.com/1272773","tags":["report"]},{"url":"https://bugzilla.suse.com/1272774","tags":["report"]},{"url":"https://bugzilla.suse.com/1274867","tags":["report"]},{"url":"https://bugzilla.suse.com/1279863","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-74990","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264156-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1226112","tags":["report"]},{"url":"https://bugzilla.suse.com/1273243","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264268-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-34703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84642","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-84129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84129","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2026-82/#CVE-2026-84129","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-84142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-100832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-103500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92054","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-96869","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-84129","title":"Site isolation issue in the DOM: Navigation component","description":"Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.","status":"published","published":"2026-09-01T12:18:56.806Z","modified":"2026-09-02T15:49:17.061Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:20:08.391556Z"}],"euvd":[{"id":"EUVD-2026-69078","description":"Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.","status":"published","published":"2026-09-01T12:18:56Z","modified":"2026-09-02T15:49:17Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:01:15.49101Z"}],"ghsa":[{"id":"GHSA-vhhv-v3m2-wvqf","title":"Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox...","description":"Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2.","status":"published","published":"2026-09-01T15:31:08Z","modified":"2026-09-02T18:33:03Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T15:11:17.943368Z"}],"nvd":[{"id":"CVE-2026-84129","description":"Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.","status":"published","published":"2026-09-01T13:20:06.91Z","modified":"2026-09-03T12:54:01.75Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:12:43.04945Z"}],"osv":[{"id":"UBUNTU-CVE-2026-84129","description":"Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.","status":"published","published":"2026-09-01T13:20:00Z","modified":"2026-09-16T14:03:45.886758978Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:57:22.213888Z"},{"id":"MGASA-2026-0387","title":"Updated firefox \u0026 nss packages fix security vulnerabilities","description":"Sandbox escape in the Remote Settings Client component. (CVE-2026-75874)\nPrivilege escalation in the DOM: Workers component. (CVE-2026-16365)\nUse-after-free in the JavaScript: GC component. (CVE-2026-84118)\nSandbox escape due to use-after-free in the DOM: Navigation component.\n(CVE-2026-84119)\nUse-after-free in the Audio/Video component. (CVE-2026-84120)\nSandbox escape due to use-after-free in the DOM: Security component.\n(CVE-2026-84121)\nUse-after-free in the Audio/Video component. (CVE-2026-84122)\nPrivilege escalation due to use-after-free in the Graphics: WebGPU\ncomponent. (CVE-2026-84123)\nUse-after-free in the DOM: Core \u0026 HTML component. (CVE-2026-84124)\nUse-after-free in the DOM: Core \u0026 HTML component. (CVE-2026-84125)\nPrivilege escalation in the DOM: Navigation component. (CVE-2026-16371)\nPrivilege escalation in the Application Update component.\n(CVE-2026-74952)\nSite isolation issue in the DOM: Navigation component. (CVE-2026-84129)\nInformation disclosure in the Graphics: WebGPU component.\n(CVE-2026-84130)\nPrivilege escalation due to invalid pointer in the Graphics component.\n(CVE-2026-84131)\nInformation disclosure in the Networking: HTTP component.\n(CVE-2026-84132)\nSite isolation issue in the DOM: Push Subscriptions component.\n(CVE-2026-84133)\nOther issue in the Profile Backup component. (CVE-2026-84134)\nOther issue in the DOM: Navigation component. (CVE-2026-84136)\nSpoofing issue in the DOM: Core \u0026 HTML component. (CVE-2026-84137)\nClickjacking issue in the DOM: Events component. (CVE-2026-84139)\nSite isolation issue in the DOM: Navigation component. (CVE-2026-84140)\nInteger overflow in the Graphics: ImageLib component. (CVE-2026-84141)\nInternally found bugs fixed in Firefox 155, Firefox ESR 153.2 and\nFirefox ESR 140.15. (CVE-2026-84143)\nInternally found bugs fixed in Firefox 155 and Firefox ESR 153.2.\n(CVE-2026-84144)\nInternally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox\nESR 140.15 and Firefox ESR 115.40. (CVE-2026-84145)\n","status":"published","published":"2026-09-09T18:01:33Z","modified":"2026-09-09T18:27:33.396333031Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"MGASA-2026-0388","title":"Updated thunderbird packages fix security vulnerabilities","description":"Uninitialized memory in MIME parsing. (CVE-2026-84639)\nOne byte overflow read in mail parser. (CVE-2026-84640)\nInformation disclosure due to malicious IMAP server response.\n(CVE-2026-84641)\nCalendar invitation attachments could launch local executables.\n(CVE-2026-84637)\nAllowed UNC hostnames for attachments interpreted as a regular\nexpression. (CVE-2026-84642)\nSandbox escape in the Remote Settings Client component. (CVE-2026-75874)\nPrivilege escalation in the DOM: Workers component. (CVE-2026-16365)\nUse-after-free in the JavaScript: GC component. (CVE-2026-84118)\nSandbox escape due to use-after-free in the DOM: Navigation component.\n(CVE-2026-84119)\nUse-after-free in the Audio/Video component. (CVE-2026-84120)\nSandbox escape due to use-after-free in the DOM: Security component.\n(CVE-2026-84121)\nUse-after-free in the Audio/Video component. (CVE-2026-84122)\nPrivilege escalation due to use-after-free in the Graphics: WebGPU\ncomponent. (CVE-2026-84123)\nUse-after-free in the DOM: Core \u0026 HTML component. (CVE-2026-84124)\nUse-after-free in the DOM: Core \u0026 HTML component. (CVE-2026-84125)\nPrivilege escalation in the DOM: Navigation component. (CVE-2026-16371)\nPrivilege escalation in the Application Update component.\n(CVE-2026-74952)\nSite isolation issue in the DOM: Navigation component. (CVE-2026-84129)\nInformation disclosure in the Graphics: WebGPU component.\n(CVE-2026-84130)\nPrivilege escalation due to invalid pointer in the Graphics component.\n(CVE-2026-84131)\nInformation disclosure in the Networking: HTTP component.\n(CVE-2026-84132)\nSite isolation issue in the DOM: Push Subscriptions component.\n(CVE-2026-84133)\nOther issue in the Profile Backup component. (CVE-2026-84134)\nOther issue in the DOM: Navigation component. (CVE-2026-84136)\nSpoofing issue in the DOM: Core \u0026 HTML component. (CVE-2026-84137)\nClickjacking issue in the DOM: Events component. (CVE-2026-84139)\nSite isolation issue in the DOM: Navigation component. (CVE-2026-84140)\nInteger overflow in the Graphics: ImageLib component. (CVE-2026-84141)\nInternally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2\nand Thunderbird ESR 140.15. (CVE-2026-84143)\nInternally found bugs fixed in Thunderbird 155 and Thunderbird ESR\n153.2. (CVE-2026-84144)\nInternally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2\nand Thunderbird ESR 140.15. (CVE-2026-84145)\n","status":"published","published":"2026-09-09T18:01:33Z","modified":"2026-09-09T18:27:30.09117019Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11666-1","title":"firefox-esr-153.2.0-1.1 on GA media","description":"These are all security issues fixed in the firefox-esr-153.2.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-02T00:00:00Z","modified":"2026-09-03T10:00:09.525854501Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:11677-1","title":"MozillaFirefox-155.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaFirefox-155.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-04T00:00:00Z","modified":"2026-09-05T09:45:04.484252313Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:12098-1","title":"MozillaThunderbird-153.4.0-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-153.4.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-10T00:00:00Z","modified":"2026-10-11T12:45:03.85762477Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:21853-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nFirefox Extended Support Release 153.2.0 ESR MFSA 2026-85 (bsc#1278001):\n\n * CVE-2026-75874 (bmo#2039972)\n Sandbox escape in the Remote Settings Client component\n * CVE-2026-84118 (bmo#2057457)\n Use-after-free in the JavaScript: GC component\n * CVE-2026-84119 (bmo#2057817)\n Sandbox escape due to use-after-free in the DOM: Navigation\n component\n * CVE-2026-84120 (bmo#2058911)\n Use-after-free in the Audio/Video component\n * CVE-2026-84121 (bmo#2059018)\n Sandbox escape due to use-after-free in the DOM: Security\n * CVE-2026-84122 (bmo#2059965)\n * CVE-2026-84123 (bmo#2060047)\n Privilege escalation due to use-after-free in the Graphics:\n WebGPU component\n * CVE-2026-84124 (bmo#2061110)\n Use-after-free in the DOM: Core \u0026 HTML component\n * CVE-2026-84125 (bmo#2063871)\n * CVE-2026-74952 (bmo#2021757)\n Privilege escalation in the Application Update component\n * CVE-2026-84129 (bmo#2055028)\n Site isolation issue in the DOM: Navigation component\n * CVE-2026-84130 (bmo#2057834)\n Information disclosure in the Graphics: WebGPU component\n * CVE-2026-84131 (bmo#2060008)\n Privilege escalation due to invalid pointer in the Graphics\n * CVE-2026-84132 (bmo#2063020)\n Information disclosure in the Networking: HTTP component\n * CVE-2026-84133 (bmo#2032388)\n Site isolation issue in the DOM: Push Subscriptions component\n * CVE-2026-84134 (bmo#2044882)\n Other issue in the Profile Backup component\n * CVE-2026-84136 (bmo#2048699)\n Other issue in the DOM: Navigation component\n * CVE-2026-84137 (bmo#2051146)\n Spoofing issue in the DOM: Core \u0026 HTML component\n * CVE-2026-84139 (bmo#2060153)\n Clickjacking issue in the DOM: Events component\n * CVE-2026-84140 (bmo#2063780)\n * CVE-2026-84141 (bmo#2063994)\n Integer overflow in the Graphics: ImageLib component\n * CVE-2026-84143 (bmo#2048793, bmo#2054631, bmo#2054645,\n bmo#2054657, bmo#2055007, bmo#2055681, bmo#2057107,\n bmo#2057108, bmo#2057114, bmo#2058087, bmo#2058088,\n bmo#2058090, bmo#2058095, bmo#2058101, bmo#2059109,\n bmo#2059183, bmo#2059185, bmo#2061287, bmo#2061301,\n bmo#2061325)\n Internally found bugs fixed in Firefox 155, Firefox ESR 153.2\n and Firefox ESR 140.15\n * CVE-2026-84144 (bmo#2054619, bmo#2054620, bmo#2054624,\n bmo#2054625, bmo#2054691, bmo#2054702, bmo#2054726,\n bmo#2054775, bmo#2055703, bmo#2058006, bmo#2058013,\n bmo#2058085, bmo#2058098, bmo#2058627, bmo#2058661,\n bmo#2059002, bmo#2059127, bmo#2059128, bmo#2059144,\n bmo#2059180, bmo#2059191, bmo#2059192, bmo#2059199,\n bmo#2059205, bmo#2061320, bmo#2061430, bmo#2061495,\n bmo#2061505, bmo#2061521, bmo#2061532, bmo#2061775,\n bmo#2061799, bmo#2062395, bmo#2062404)\n Internally found bugs fixed in Firefox 155 and Firefox ESR\n 153.2\n * CVE-2026-84145 (bmo#2054640, bmo#2054650, bmo#2054652,\n bmo#2055678, bmo#2055693, bmo#2055705, bmo#2058001,\n bmo#2058051, bmo#2058652, bmo#2058660, bmo#2059027,\n bmo#2059139, bmo#2061220, bmo#2061242, bmo#2061285,\n bmo#2061300, bmo#2061316, bmo#2061397, bmo#2062400,\n bmo#2062419)\n Internally found bugs fixed in Firefox 155, Firefox ESR\n 153.2, Firefox ESR 140.15 and Firefox ESR 115.40\n","status":"published","published":"2026-09-15T14:40:48Z","modified":"2026-09-17T18:23:13.851165731Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:23784-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nFirefox Extended Support Release 153.2.0 ESR MFSA 2026-85 (bsc#1278001):\n\n * CVE-2026-75874 (bmo#2039972)\n Sandbox escape in the Remote Settings Client component\n * CVE-2026-84118 (bmo#2057457)\n Use-after-free in the JavaScript: GC component\n * CVE-2026-84119 (bmo#2057817)\n Sandbox escape due to use-after-free in the DOM: Navigation\n component\n * CVE-2026-84120 (bmo#2058911)\n Use-after-free in the Audio/Video component\n * CVE-2026-84121 (bmo#2059018)\n Sandbox escape due to use-after-free in the DOM: Security\n * CVE-2026-84122 (bmo#2059965)\n * CVE-2026-84123 (bmo#2060047)\n Privilege escalation due to use-after-free in the Graphics:\n WebGPU component\n * CVE-2026-84124 (bmo#2061110)\n Use-after-free in the DOM: Core \u0026 HTML component\n * CVE-2026-84125 (bmo#2063871)\n * CVE-2026-74952 (bmo#2021757)\n Privilege escalation in the Application Update component\n * CVE-2026-84129 (bmo#2055028)\n Site isolation issue in the DOM: Navigation component\n * CVE-2026-84130 (bmo#2057834)\n Information disclosure in the Graphics: WebGPU component\n * CVE-2026-84131 (bmo#2060008)\n Privilege escalation due to invalid pointer in the Graphics\n * CVE-2026-84132 (bmo#2063020)\n Information disclosure in the Networking: HTTP component\n * CVE-2026-84133 (bmo#2032388)\n Site isolation issue in the DOM: Push Subscriptions component\n * CVE-2026-84134 (bmo#2044882)\n Other issue in the Profile Backup component\n * CVE-2026-84136 (bmo#2048699)\n Other issue in the DOM: Navigation component\n * CVE-2026-84137 (bmo#2051146)\n Spoofing issue in the DOM: Core \u0026 HTML component\n * CVE-2026-84139 (bmo#2060153)\n Clickjacking issue in the DOM: Events component\n * CVE-2026-84140 (bmo#2063780)\n * CVE-2026-84141 (bmo#2063994)\n Integer overflow in the Graphics: ImageLib component\n * CVE-2026-84143 (bmo#2048793, bmo#2054631, bmo#2054645,\n bmo#2054657, bmo#2055007, bmo#2055681, bmo#2057107,\n bmo#2057108, bmo#2057114, bmo#2058087, bmo#2058088,\n bmo#2058090, bmo#2058095, bmo#2058101, bmo#2059109,\n bmo#2059183, bmo#2059185, bmo#2061287, bmo#2061301,\n bmo#2061325)\n Internally found bugs fixed in Firefox 155, Firefox ESR 153.2\n and Firefox ESR 140.15\n * CVE-2026-84144 (bmo#2054619, bmo#2054620, bmo#2054624,\n bmo#2054625, bmo#2054691, bmo#2054702, bmo#2054726,\n bmo#2054775, bmo#2055703, bmo#2058006, bmo#2058013,\n bmo#2058085, bmo#2058098, bmo#2058627, bmo#2058661,\n bmo#2059002, bmo#2059127, bmo#2059128, bmo#2059144,\n bmo#2059180, bmo#2059191, bmo#2059192, bmo#2059199,\n bmo#2059205, bmo#2061320, bmo#2061430, bmo#2061495,\n bmo#2061505, bmo#2061521, bmo#2061532, bmo#2061775,\n bmo#2061799, bmo#2062395, bmo#2062404)\n Internally found bugs fixed in Firefox 155 and Firefox ESR\n 153.2\n * CVE-2026-84145 (bmo#2054640, bmo#2054650, bmo#2054652,\n bmo#2055678, bmo#2055693, bmo#2055705, bmo#2058001,\n bmo#2058051, bmo#2058652, bmo#2058660, bmo#2059027,\n bmo#2059139, bmo#2061220, bmo#2061242, bmo#2061285,\n bmo#2061300, bmo#2061316, bmo#2061397, bmo#2062400,\n bmo#2062419)\n Internally found bugs fixed in Firefox 155, Firefox ESR\n 153.2, Firefox ESR 140.15 and Firefox ESR 115.40\n","status":"published","published":"2026-09-15T14:37:45Z","modified":"2026-09-27T18:23:12.079813721Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4140-1","title":"Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen","description":"This update for MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues:\n\nChanges in MozillaFirefox:\n\nThis update ships Firefox Extended Support Release 153.2.0 ESR\n\n* Fixed: Various security fixes.\n\nMFSA 2026-85 (bsc#1278001):\n\n  * CVE-2026-75874: Sandbox escape in the Remote Settings Client component\n  * CVE-2026-84118: Use-after-free in the JavaScript: GC component\n  * CVE-2026-84119: Sandbox escape due to use-after-free in the DOM: Navigation\n    component\n  * CVE-2026-84120: Use-after-free in the Audio/Video component\n  * CVE-2026-84121: Sandbox escape due to use-after-free in the DOM: Security\n    component\n  * CVE-2026-84122: Use-after-free in the Audio/Video component\n  * CVE-2026-84123: Privilege escalation due to use-after-free in the Graphics:\n    WebGPU component\n  * CVE-2026-84124: Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-84125: Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-74952: Privilege escalation in the Application Update component\n  * CVE-2026-84129: Site isolation issue in the DOM: Navigation component\n  * CVE-2026-84130: Information disclosure in the Graphics: WebGPU component\n  * CVE-2026-84131: Privilege escalation due to invalid pointer in the Graphics\n    component\n  * CVE-2026-84132: Information disclosure in the Networking: HTTP component\n  * CVE-2026-84133: Site isolation issue in the DOM: Push Subscriptions component\n  * CVE-2026-84134: Other issue in the Profile Backup component\n  * CVE-2026-84136: Other issue in the DOM: Navigation component\n  * CVE-2026-84137: Spoofing issue in the DOM: Core \u0026 HTML component\n  * CVE-2026-84139: Clickjacking issue in the DOM: Events component\n  * CVE-2026-84140: Site isolation issue in the DOM: Navigation component\n  * CVE-2026-84141: Integer overflow in the Graphics: ImageLib component\n  * CVE-2026-84143: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2\n    and Firefox ESR 140.15\n  * CVE-2026-84144: Internally found bugs fixed in Firefox 155 and Firefox ESR\n    153.2\n  * CVE-2026-84145: Internally found bugs fixed in Firefox 155, Firefox ESR\n    153.2, Firefox ESR 140.15 and Firefox ESR 115.40\n\n* Fixed: Various security fixes.\n\n  MFSA 2026-77 (bsc#1274867)\n  * CVE-2026-74934 \n    Site isolation issue in the Graphics: CanvasWebGL component\n  * CVE-2026-74935 \n    Privilege escalation in the DOM: Networking component\n  * CVE-2026-74936 \n    Use-after-free in the JavaScript: WebAssembly component\n  * CVE-2026-74937 \n    Use-after-free in the JavaScript: GC component\n  * CVE-2026-74938 \n    Mitigation bypass in the JavaScript: GC component\n  * CVE-2026-74939 \n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-74940 \n    Use-after-free in the Graphics: Text component\n  * CVE-2026-74941 \n    Privilege escalation in the Graphics: CanvasWebGL component\n  * CVE-2026-74942 \n    Privilege escalation in the Remote Settings Client component\n  * CVE-2026-74943 \n    Use-after-free in the Graphics: ImageLib component\n  * CVE-2026-74944 \n    Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-74945 \n    Information disclosure in the Graphics: Text component\n  * CVE-2026-74946 \n    Privilege escalation due to incorrect boundary conditions in\n    the Graphics: CanvasWebGL component\n  * CVE-2026-74947 \n    Privilege escalation due to invalid pointer in the Graphics\n    component\n  * CVE-2026-74948 \n    Information disclosure in the Graphics component\n  * CVE-2026-74949 \n    Privilege escalation due to use-after-free in the Graphics:\n    Canvas2D component\n  * CVE-2026-74950 \n    Privilege escalation in the Downloads API component\n  * CVE-2026-74953 \n    Privilege escalation in the Networking: Cookies component\n  * CVE-2026-74954 \n    Information disclosure due to side-channel in the Storage:\n    Cache API component\n  * CVE-2026-74955 \n    Privilege escalation in the Request Handling component\n  * CVE-2026-74956 \n    Same-origin policy bypass in the DOM: Service Workers\n    component\n  * CVE-2026-74957 \n    Mitigation bypass in the Safe Browsing component\n  * CVE-2026-74958 \n    Information disclosure in the WebRTC component\n  * CVE-2026-74959 \n    Mitigation bypass in the Storage: Cache API component\n  * CVE-2026-74960 \n    Site isolation issue in the WebExtensions component\n  * CVE-2026-74961 \n    Side-channel in the Web Audio component\n  * CVE-2026-74962 \n    Site isolation issue in the Networking: Cookies component\n  * CVE-2026-74963 \n    Same-origin policy bypass in the Networking: Cookies\n    component\n  * CVE-2026-74964 \n    Integer overflow in the Graphics component\n  * CVE-2026-74965 \n    Privilege escalation in the Shell Integration component\n  * CVE-2026-74966 \n    Information disclosure in the Form Autofill component\n  * CVE-2026-74967 \n    Same-origin policy bypass in the Audio/Video: Playback\n    component\n  * CVE-2026-74968 \n    Site isolation issue in the Graphics: WebRender component\n  * CVE-2026-74969 \n    Use-after-free in the Layout: Text and Fonts component\n  * CVE-2026-74970 \n    Site isolation issue in the Graphics component\n  * CVE-2026-74971 \n    Information disclosure in the DOM: UI Events \u0026 Focus Handling\n    component\n  * CVE-2026-74972 \n    Information disclosure in the DOM: Push Subscriptions\n    component\n  * CVE-2026-74973 \n    Race condition, use-after-free in the Graphics component\n  * CVE-2026-74974 \n    Same-origin policy bypass in the Graphics: ImageLib component\n  * CVE-2026-74976 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-74977 \n    Integer overflow in the Graphics component\n  * CVE-2026-74978 \n    Clickjacking issue in the Widget component\n  * CVE-2026-74979 \n    Mitigation bypass in the Add-ons Manager component\n  * CVE-2026-74981 \n    Site isolation issue in the Audio/Video: Web Codecs component\n  * CVE-2026-74982 \n    Denial-of-service in the Widget component\n  * CVE-2026-74983 \n    Mitigation bypass in the Data Loss Prevention component\n  * CVE-2026-74984 \n    Race condition in the JavaScript Engine component\n  * CVE-2026-74985 \n    Privilege escalation in the Enterprise Policies component\n  * CVE-2026-74986 \n    Site isolation issue in the CSS Parsing and Computation\n    component\n  * CVE-2026-74987 \n    Internally found bugs fixed in Firefox ESR 140.14, Firefox\n    ESR 153.1 and Firefox 154\n  * CVE-2026-74988 \n    Internally found bugs fixed in Firefox ESR 153.1 and Firefox\n    154\n  * CVE-2026-74990 \n    Internally found bugs fixed in Firefox ESR 115.39, Firefox\n    ESR 140.14, Firefox ESR 153.1 and Firefox 154\n- Firefox Extended Support Release 153.0esr ESR\n  * New: ## General\n    - Firefox now includes a new profile management system that\n    helps you separate your online life into distinct profiles\n    for work, school, vacation planning, or whatever you choose.\n    Profiles can be customized with names, avatars, and color\n    themes while keeping tabs, bookmarks, passwords, and browsing\n    history separate. Built-in profile backup and restore also\n    makes it easier to migrate to a new device or recover your\n    browsing data.\n    - Split View lets you view two webpages side-by-side in a\n    single browser window, with additional options to quickly\n    open links in Split View, rearrange pages, and search open\n    tabs.\n    - The Firefox address bar has gained several new\n    capabilities, including built-in unit and time zone\n    conversion, quick actions such as muting all browser audio,\n    and direct search results as you type.\n    - Firefox now supports copying links directly to highlighted\n    text on a webpage for easier sharing.\n    - Firefox Settings has been redesigned with improved\n    organization and navigation, making it easier to find and\n    customize browser preferences.\n  * New: ## AI\n    Firefox introduced several new AI-powered features, including\n    on-device tab organization, AI-assisted link previews,\n    integrated AI search, and centralized controls for managing\n    AI features. Whenever possible, these features perform\n    processing locally to help protect user privacy.\n  * New: ## Sidebar and Tabs\n    - Firefox continues to improve tab management with\n    enhancements to vertical tabs, tab groups, and the sidebar.\n    - Tab groups have gained numerous usability improvements,\n    including better support for collapsed groups, previews of\n    grouped tabs, and additional organization options.\n    - Passwords can now be accessed directly from the Firefox\n    sidebar without opening a separate tab.\n    - Firefox now supports copying links from one or multiple\n    background tabs directly from the tab context menu, and\n    multiple tabs can be copied or shared in a single action.\n    - A Send Tab toolbar button is now available through\n    Customize Toolbar.\n  * New: ## Security \u0026 Privacy\n    - Firefox has significantly expanded Fingerprinting\n    Protection, making it harder for websites to uniquely\n    identify users in both Standard and Strict Enhanced Tracking\n    Protection modes.\n    - Enhanced Tracking Protection includes stronger protections\n    against bounce tracking and additional safeguards that\n    restrict websites from accessing local network resources\n    without user permission.\n    - Firefox now uses Safe Browsing V5 for phishing and malware\n    protection.\n    - Firefox Password Manager now uses stronger AES-256\n    encryption to protect stored logins on disk.\n    - Private Browsing has been enhanced with new controls,\n    including the ability to instantly end a private browsing\n    session and temporarily relax tracker blocking for individual\n    sites when needed for compatibility.\n  * New: ## Translations\n    - Firefox has expanded on-device translation support with\n    many additional languages and continued improvements to\n    translation quality.\n    - A dedicated translations page now provides an easy way to\n    perform real-time translations directly within Firefox.\n  * New: ## Accessibility\n    - Firefox continues to improve accessibility with enhanced\n    support for assistive technologies, including Windows UI\n    Automation, improved keyboard navigation, more accessible\n    date and time controls, and better support for mathematical\n    content in PDFs.\n  * New: ## Windows\n    - Firefox now supports installing websites as standalone web\n    apps pinned to the Windows taskbar.\n    - Firefox web apps are also available for Microsoft Store\n    installations.\n    - Firefox now better integrates with Windows location\n    permissions when websites request geolocation access.\n  * New: ## macOS\n    - Firefox now uses a dedicated GPU process by default,\n    improving stability by allowing graphics failures to recover\n    without restarting the browser.\n    - WebGPU is now enabled by default on Apple Silicon Macs.\n  * New: ## Linux\n    - Firefox now supports native fractional scaling on Wayland,\n    improving rendering on high-DPI displays.\n    - Firefox no longer requires a restart after package manager\n    updates and uses less memory on Linux.\n    - Firefox now supports the XDG Base Directory Specification\n    and ships with RPM packages for Red Hat, Fedora, openSUSE,\n    and other RPM-based distributions.\n  * HTML5: - Firefox now supports the View Transitions API for\n    creating smooth animated transitions between application\n    views.\n    - WebGPU support has expanded across supported platforms,\n    including Windows and Apple Silicon Macs.\n    - Added support for several modern web platform APIs,\n    improving compatibility with modern web applications. Notable\n    additions include the Navigation API, URLPattern, Trusted\n    Types, Sanitizer API, and Prioritized Task Scheduling.\n  * Enterprise: - Enterprise administrators can now centrally\n    manage Firefox's Generative AI features through enterprise\n    policy.\n    - Fixed a performance regression affecting native messaging,\n    improving responsiveness for enterprise extensions that\n    communicate with external applications.\n    - Enterprise policy documentation has moved to\n    https://firefox-admin-docs.mozilla.org/.\n  * Fixed: Various security fixes.\n  MFSA 2026-68 (bsc#1271649)\n  * CVE-2026-16349 \n    Same-origin policy bypass in the DOM: Navigation component\n  * CVE-2026-16350 \n    Incorrect boundary conditions in the Audio/Video: cubeb\n    component\n  * CVE-2026-16362 \n    Use-after-free in the WebRTC: Audio/Video component\n  * CVE-2026-16351 \n    Sandbox escape due to use-after-free in the DOM: Navigation\n    component\n  * CVE-2026-16352 \n    Sandbox escape due to use-after-free in the Disability Access\n    APIs component\n  * CVE-2026-16363 \n    JIT miscompilation in the JavaScript: WebAssembly component\n  * CVE-2026-16364 \n    Incorrect boundary conditions in the Audio/Video: Playback\n    component\n  * CVE-2026-16365 \n    Privilege escalation in the DOM: Workers component\n  * CVE-2026-16366 \n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-16353 \n    Invalid pointer in the DOM: Bindings (WebIDL) component\n  * CVE-2026-16354 \n    Information disclosure in the Graphics: ImageLib component\n  * CVE-2026-16367 \n    Sandbox escape due to invalid pointer in the Disability\n    Access APIs component\n  * CVE-2026-16368 \n    Incorrect boundary conditions in the JavaScript: WebAssembly\n    component\n  * CVE-2026-16369 \n    Integer overflow in the JavaScript: WebAssembly component\n  * CVE-2026-16355 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-16356 \n    Sandbox escape due to use-after-free in the Disability Access\n    APIs component\n  * CVE-2026-16357 \n    Incorrect boundary conditions in the Graphics component\n  * CVE-2026-16370 \n    Mitigation bypass in the DOM: Networking component\n  * CVE-2026-16371 \n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-16372 \n    Privilege escalation in the DOM: Content Processes component\n  * CVE-2026-16373 \n    Information disclosure in the Privacy component in Firefox\n    for Android\n  * CVE-2026-16374 \n    Information disclosure in the Framework component in DevTools\n  * CVE-2026-16375 \n    Site isolation issue in the Networking: HTTP component\n  * CVE-2026-16376 \n    Denial-of-service in the Graphics: WebGPU component\n  * CVE-2026-16377 \n    Mitigation bypass in the PDF Viewer component\n  * CVE-2026-16378 \n    Other issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop\n    component\n  * CVE-2026-16379 \n    Privilege escalation in the DOM: Content Processes component\n  * CVE-2026-16358 \n    Site isolation issue in the Graphics: WebRender component\n  * CVE-2026-16380 \n    Mitigation bypass in the Networking component\n  * CVE-2026-16381 \n    Same-origin policy bypass in the Networking: DNS component\n  * CVE-2026-16382 \n    Mitigation bypass in the DOM: Service Workers component\n  * CVE-2026-16383 \n    Mitigation bypass in the DOM: Networking component\n  * CVE-2026-16384 \n    Information disclosure due to uninitialized memory in the\n    Graphics: WebGPU component\n  * CVE-2026-16385 \n    Information disclosure due to uninitialized memory in the\n    Graphics: WebGPU component\n  * CVE-2026-16386 \n    Information disclosure due to uninitialized memory in the\n    Graphics: WebGPU component\n  * CVE-2026-16387 \n    Site isolation issue in the Networking component\n  * CVE-2026-16388 \n    Sandbox escape in the DOM: Networking component\n  * CVE-2026-16389 \n    Incorrect boundary conditions, integer overflow in the\n    Libraries component in NSS\n  * CVE-2026-16390 \n    Mitigation bypass in the Enterprise Policies component\n  * CVE-2026-16391 \n    Information disclosure in the Storage: IndexedDB component\n  * CVE-2026-16392 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-16393 \n    Incorrect boundary conditions in the Graphics: WebGPU\n    component\n  * CVE-2026-16359 \n    Incorrect boundary conditions in the Audio/Video: GMP\n    component\n  * CVE-2026-16394 \n    Mitigation bypass in the DOM: Security component\n  * CVE-2026-16395 \n    Integer overflow in the Audio/Video component\n  * CVE-2026-16396 \n    Privilege escalation in WebExtensions\n  * CVE-2026-16397 \n    Clickjacking issue in the WebExtensions component in Firefox\n    for Android\n  * CVE-2026-16398 \n    Site isolation issue in the Graphics component\n  * CVE-2026-16399 \n    Site isolation issue in the DOM: Navigation component\n  * CVE-2026-16400 \n    Information disclosure in the DOM: Security component\n  * CVE-2026-16401 \n    Privilege escalation in the Data Loss Prevention component\n  * CVE-2026-16402 \n    Integer overflow in the Graphics: ImageLib component\n  * CVE-2026-16403 \n    Spoofing issue in the Address Bar component\n  * CVE-2026-16404 \n    Spoofing issue in Firefox for Android\n  * CVE-2026-16405 \n    Information disclosure in the Networking: WebSockets\n    component\n  * CVE-2026-16406 \n    Mitigation bypass in the Networking component\n  * CVE-2026-16407 \n    Mitigation bypass in the DOM: Service Workers component\n  * CVE-2026-16408 \n    Integer overflow in the Audio/Video: Playback component\n  * CVE-2026-16409 \n    Invalid pointer in the Security: PSM component\n  * CVE-2026-16410 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-16411 Memory safety bugs fixed in Firefox 153\n  * CVE-2026-16412 Memory safety bugs fixed in Firefox ESR 140.13 and Firefox\n    153\n  * CVE-2026-16360 Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR\n    140.13 and Firefox 153\n\n  * Fixed: Various security fixes.\n  MFSA 2026-76 (bsc#1274867)\n  * CVE-2026-74934 \n    Site isolation issue in the Graphics: CanvasWebGL component\n  * CVE-2026-74935 \n    Privilege escalation in the DOM: Networking component\n  * CVE-2026-74936 \n    Use-after-free in the JavaScript: WebAssembly component\n  * CVE-2026-74939 \n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-74940 \n    Use-after-free in the Graphics: Text component\n  * CVE-2026-74941 \n    Privilege escalation in the Graphics: CanvasWebGL component\n  * CVE-2026-74942 \n    Privilege escalation in the Remote Settings Client component\n  * CVE-2026-74943 \n    Use-after-free in the Graphics: ImageLib component\n  * CVE-2026-74944 \n    Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-74945 \n    Information disclosure in the Graphics: Text component\n  * CVE-2026-74946 \n    Privilege escalation due to incorrect boundary conditions in\n    the Graphics: CanvasWebGL component\n  * CVE-2026-74948 \n    Information disclosure in the Graphics component\n  * CVE-2026-74949 \n    Privilege escalation due to use-after-free in the Graphics:\n    Canvas2D component\n  * CVE-2026-74953 \n    Privilege escalation in the Networking: Cookies component\n  * CVE-2026-74957 \n    Mitigation bypass in the Safe Browsing component\n  * CVE-2026-74959 \n    Mitigation bypass in the Storage: Cache API component\n  * CVE-2026-74960 \n    Site isolation issue in the WebExtensions component\n  * CVE-2026-74962 \n    Site isolation issue in the Networking: Cookies component\n  * CVE-2026-74963 \n    Same-origin policy bypass in the Networking: Cookies\n    component\n  * CVE-2026-74964 \n    Integer overflow in the Graphics component\n  * CVE-2026-74965 \n    Privilege escalation in the Shell Integration component\n  * CVE-2026-74967 \n    Same-origin policy bypass in the Audio/Video: Playback\n    component\n  * CVE-2026-74969 \n    Use-after-free in the Layout: Text and Fonts component\n  * CVE-2026-74971 \n    Information disclosure in the DOM: UI Events \u0026 Focus Handling\n    component\n  * CVE-2026-74972 \n    Information disclosure in the DOM: Push Subscriptions\n    component\n  * CVE-2026-74973 \n    Race condition, use-after-free in the Graphics component\n  * CVE-2026-74974 \n    Same-origin policy bypass in the Graphics: ImageLib component\n  * CVE-2026-74976 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-74983 \n    Mitigation bypass in the Data Loss Prevention component\n  * CVE-2026-74987 \n    Internally found bugs fixed in Firefox ESR 140.14, Firefox\n    ESR 153.1 and Firefox 154\n  * CVE-2026-74990 \n    Internally found bugs fixed in Firefox ESR 115.39, Firefox\n    ESR 140.14, Firefox ESR 153.1 and Firefox 154\nChanges in rust-cbindgen:\n\n- Update to version v0.29.4+git0:\n\n  * tests: Add some tests for constant enums.\n  * ir: Add support for arrays.\n  * ir: Allow constant literals with enum variants.\n  * ir: Use Path for ConstExprs.\n  * Bump version to 0.29.3 and update CHANGES doc\n  * tests: Fix tests with modern gcc.\n  * Use C++ fixed-type enumeration syntax under C23 (or higher) as well\n  * Allow `pub` access to `ReprType` fields\n\n- Update to version 0.29.2+git0:\n\n  * ci: Add a meta job to block the merge queue on it.\n  * Check for CMSE ABI's as well\n  * Fix doc attribute parsing to properly handle block comments\n  * Expose the line_endings config option to use with the builder\n  * fix env in workflow file\n  * use env to pass output parameters\n  * Explicitly request serde's std features to avoid issues with newer toml versions.\n  * Account for master -\u003e main rename.\n  * Update changelog and bump version.\n  * enum: Track dependencies properly in enumerations.\n\n- Update to version 0.29.2+git0:\n\n  * Explicitly request serde's std features to avoid issues with newer toml versions.\n  * Account for master -\u003e main rename.\n  * Update changelog and bump version.\n  * enum: Track dependencies properly in enumerations.\n  * Allow must_use if a reason is specified\n  * constant: Handle cfg in associated constants.\n  * tests: Add a test for bitflags + disjoint cfg.\n  * Remove 'display' feature from the toml crate\n  * DOC: Add metatensor\n  * Fix #1085 - Incorrect detection of duplicated constants\n  * chore: More clippy fixes.\n  * docs: Correct after_include type in example config\n  * cargo update\n  * cfg: Remove another clippy warning.\n  * Fix `clippy::uninlined_format_args`\n  * Update toml to 0.9\n  * Release 0.29.0\n  * Support no-export annotation for statics and functions.\n  * conditional fields of constexpr literal structs\n  * Add LiteralStructField\n  * Github action: Add aarch64 to deploy\n  * Add rename rule for generated associated constant\n  * Upgrade heck to 0.5\n  * Add support for an optional nullable attribute\n  * docs.md: Fix deprecated_with_note and deprecated_variant_with_note being spelled as 'notes'\n  * Fix generic with 'void' default\n  * The return of Cast is simplified\n  * Added tests for as keyword inside array into structs\n  * Fixed error generation of structures using the keyword of as inside arrays\n  * Added test for unsafe(no_mangle) attribute\n  * Added tests for unsafe methotd's atributs\n  * Fixed handling of trait methods containing the unsafe attribute\n  * Rename -Zparse-only\n  * Release 0.28.0\n  * tests: Fix symbol file and tests.\n  * Appease clippy.\n  * tests: Run rustfmt.\n\nChanges in mozilla-nspr:\n\nUpdate to NSPR 4.39:\n\n  * Improved error handling in PR_CreateThread on Windows\n  * Cleanup and Type-cast fixes for prtime\n  * Remove unused prstreams C++ wrapper from NSPR\n  * Memory poisoning and Arena redzone fixes\n  * Removed emacs/vim modelines and .cvsignore files\n  * Added .editorconfig\n\nUpdate to version 4.38.2:\n\n  * Fixed a syntax error in test file parsetm.c, which was\n    introduced in 4.38.1 \n\nUpdate to version 4.38.1:\n\n  * Incorrect time value produced by PR_ParseTimeString and\n    PR_ParseTimeStringToExplodedTime if input string doesn't\n    specify seconds. \n\nUpdate to version 4.38:\n\n  * Removed support for HPUX and _PR_POLL_WITH_SELECT\n    (bmo#1965666, bmo#1965916)\n  * Fixed a bug in pt_TCP_SendTo on macOS\n  * Ensure parameter passed to isalpha() is unsigned char (bmo#375149)\n\nUpdate to version 4.37:\n\n  * PR_GetUniqueIdentity asserts on the 32767th call\n  * error LNK2019: unresolved external symbol _InterlockedCompareExchange\n  * initclk deadline elapsed macOS\n  * Remove prwin.h (formerly known as prwin16.h)\n  * Use builtin atomic functions on RISC-V32/64\n  * PR_FormatTimeUSEnglish() doesn't support '%e' format specifier\n\nChanges in mozilla-nss:\n\n- Fix potential crash in nss-fips-approved-crypto-non-ec.patch (boo#1279863)\n- Fix upper bound to allow FIPS approval for P-521.\n- Approve HKDF and key concatenation in the context of TLS. This enables approved TLS 1.3 channels with PQC (bsc#1262698).\n- Don't consider unapproved algorithms for TLS 1.3 in FIPS mode.\n- Mark TLS 1.2 KDF without extended master secret non-approved for FIPS (bsc#1266262).\n- Add patch to prefer any hybrid PQC and send at most one hybrid key share (bsc#1262698).\n- Add a notice to the module ID when it's in non-FIPS mode (bsc#1266263).\n\n- Import ML-DSA implementation and related PQC fixes from upstream (bsc#1262698, bsc#1272772).\n- Add power-on self-tests (KATs) for ML-KEM and ML-DSA (bsc#1272773).\n- Add zeroization for ML-KEM, ported from upstream (bsc#1272774).\n- Add zeroization for ML-DSA (bsc#1272774).\n- Add ML-DSA robustness and test fixes.\n\n- Add PQC algorithms to approved list. Increase approved symmetric keygen floor to 112\n  bits (bsc#1262698). Approve non-NSS-aliased TLS 1.2 mechanisms\n  (bsc#1266262).\n- Apply jitter entropy patch unconditionally (bsc#1262701).\n\nUpdate to NSS 3.125:\n\n  * Set nssckbi version to 2.88.\n  * Add Cybertrust Japan SecureSign Root CA16.\n  * Remove Email Trust bit from TrustAsia Global Root CA G3 and G4.\n  * Remove Entrust Root Certification Authority.\n  * Remove SecureSign Root CA12.\n  * Initialize ssl3.hs.echOuterExtensions in ssl_NewSocket.\n  * replace references to nss-dev/nss with mozilla/nss.\n  * limit recursion depth in CMS decoder.\n  * clamp input.len to testString size in pk11_mergeSecretKey.\n  * NULL pointer dereference in CERT_MergeExtensions.\n  * CERT_DecodeAVAValue — Integer Overflow in Output Buffer Sizing.\n  * fix two integer overflows on LLP64 systems.\n  * Modify an assertion in ssl3_ClientSendAppProtoXtn.\n  * Import RSA-PSS PKCS#8 private keys.\n  * Add EC Derive fuzz target.\n  * Update fuzz/config/tstclnt_arguments.py.\n  * Add DSAU fuzz target.\n  * Update ASN1 mutators for fuzzing.\n  * Update TLS mutators for fuzzing.\n  * Update TLS certs for fuzzing.\n  * Update TLS config for fuzzing.\n  * Extend QuickDER fuzz target.\n  * Extend PKCS12 fuzz target.\n  * Extend PKCS8 fuzz target.\n  * Extend certDN fuzz target.\n  * Update ASN1 fuzz target.\n  * Extend PKCS7 fuzz target.\n  * Bounds-check wrap index in PK11_GetWrapKey to match PK11_SetWrapKey.\n  * Adding a guard against integer overflow in AESKeyWrap_EncryptKWP.\n  * Add an integer overflow guard in UpdateBase64Decoder.\n  * Void out the fd.release in reconfig tests.\n  * make sftk_FindAttribute return a copy.\n  * Converted nss parameter schema from voluptuous to msgspec.\n  * bmo#311577 - drop slot monitor in PK11_ResetToken before calling PK11_InitToken.\n  * adjust the code to use nspr from github.\n  * avoid deadlock when PK11_IsLoggedIn is called from PK11_DoPassword.\n  * test pk11auth.c functions with a non-threadsafe module.\n  * bmo#311577 - PK11_InitPin sets slot-\u003elastLoginCheck without holding the slot monitor.\n  * reject empty nickname in PK11_TraverseCertsForNicknameInSlot.\n  * validate encoded EC params length and tag in SECKEY_ECParamsToKeySize/BasePointOrderLen.\n  * guard space subtraction in ssl_CallCustomExtensionSenders.\n  * rewrite labelLen bound in tls13_HkdfExpandLabelGeneral to avoid unsigned overflow.\n  * bound usageCount in PK11_UnwrapPrivKey to keyTemplate capacity.\n  * Set tail pointer to null in static slot lists when deallocating.\n  * avoid leaving a dangling ss-\u003esec.ci.sid on allocation failure.\n  * guard against integer overflow in CERT_Hexify.\n  * Reject empty SECItem inputs in sftk_IsSafePrime before indexing data[len-1].\n  * NUL-terminate within filename field in jar_listtar to bound the filename scan.\n  * Widen CERT_FormatName length accumulator from unsigned to size_t.\n  * Bound IKE PRF nonce lengths to prevent CK_ULONG to unsigned int truncation.\n  * Drop companion arrays on length mismatch in NSS_CMSArray_Sort instead of asserting.\n  * Operate on a NUL-terminated copy in jar_parse_any to keep manifest scans bounded.\n  * Reject MD2 contexts with unusedBuffer \u003e MD2_BUFSIZE in Update and End.\n  * Reserve NUL terminator for CKA_NSS_URL in nssCKObject_GetAttributes.\n  * Guard padding read against empty output in SEC_PKCS7DecryptContents.\n  * Guard against keySize overflow in IKE PRF/PRF+ output sizing.\n  * Allocate values array when overwriting an empty CMS attribute.\n  * Validate CKA_TOKEN attribute size in nssCKFWObject_SetAttribute.\n  * Validate CKA_CERTIFICATE_TYPE ulValueLen in nss_cert_type_from_ck_attrib.\n  * Handle zero-length input in PrepareBitStringForEncoding.\n  * Length-check raw_manifest before PORT_Strncasecmp prefix dispatch in JAR_parse_manifest.\n  * Reject CKA_NSS_MODULE_SPEC values that aren’t NUL-terminated within ulValueLen.\n  * Reject negative PR_Read returns in JAR_digest_file and jar_create_pk7.\n  * Update Bogo tests to 3fff7111b0eca817466e121059cb4e8b67ade35b.\n  * doc: import NSS:TryServer wiki page in the tree.\n  * improve PK11 URI tests.\n  * avoid nested attributeLock acquisition in sftk_CopyObject.\n  * doc: fix a typo in “Community — Network Security Services (NSS)”.\n  * acquire RWLock before key copies in ssl_SetSelfEncryptKeyPair.\n  * Reject empty nickname in PK11_TraverseCertsForNicknameInSlot.\n  * require non-null session pointer in sftk_GetContext.\n  * set session-\u003elastOpWasFIPS while holding session reference.\n  * atomically claim object removal in sftk_DeleteObject.\n  * atomically swap session search in NSC_FindObjects*.\n  * atomically install session contexts in C_*Init.\n  * hold session reference for context lifetime in C_*Update.\n  * align softoken session lock with head-bucket hash.\n  * restore reference counting for SFTKSession.\n\n- update to NSS 3.124\n  * Add test for PKCS7 digest array alignment\n  * Add test for rejection of excessively large ASN.1 SEQUENCE OF in quickder\n  * Add test for CMS content size validation\n  * Add regression tests for DSAU signature decoding\n  * Add test for S/MIME profile lookup on temp certs\n  * Test case for post-handshake auth and many certificate requests\n  * Add test for intra-arena ASan redzones\n  * update nss_status flags one at a time\n  * add defensive info-\u003elen check in PK11_HPKE_SetupS and PK11_HPKE_SetupR\n  * avoid PORT_Strdup in ssl_DecodeResumptionToken\n  * add runtime check on decoded resumption token session id\n  * improve mach try error handling\n  * clang format\n  * add comprehensive SECItem and SECItemArray tests\n  * add bugzilla_cf_status_nss.py script\n  * regenerate some recent release notes\n  * fix bug list output by release note and email scripts\n  * test removal from trust domain email cache\n  * fix 'testing if key corruption is detected in attribute' failures with sqlite-3.53.0\n  * build sqlite3 shell for Windows CI runners\n  * avoid race with module unloading in NSSTrustDomain_FindTokensByURI\n  * add ImportEd25519WithNonEmptyAlgorithmParams test\n  * add CLAUDE.md and .mcp.json\n  * add a mach try command\n  * remove dead condition in sec_asn1d_check_and_subtract_length\n  * avoid integer truncation in nssCKObject_GetAttributes\n  * add defensive input validation to sftk_compute_ANSI_X9_63_kdf\n  * avoid refcount over-release in nssTokenObjectCache error path [@ nssToken_Destroy]\n  * sdb: enforce that metaData's id key is unique when reading\n  * improve handling of escape sequences in pk11uri_ParseAttributes\n  * use correct data for ID comparison in transfer_uri_certs_to_collection\n  * fix truncation of ulValueLen in sdb_FindObjectsInit\n  * reject DTLS 1.3 Server Hello after HVR without capping ss-\u003evrange.max\n  * set previous-nss-release for abicheck\n  * Skip `PR_Sleep` yield for non-blocking sockets in `ssl3_SendApplicationData`\n  * consistently protect PK11SlotInfo::maxKeyCount with freeListLock\n  * Remove CRMF from testing and manifests\n  * Remove unused RSA blind signature implementation from freebl\n- update to NSS 3.123.1\n  * reject DTLS 1.3 Server Hello after HVR without\n    capping ss-\u003evrange.max\n- update to NSS 3.123\n  * https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/AW6VHkn6E0o\n- update to NSS 3.122.2:\n  * reject DTLS 1.3 Server Hello after HVR without\n    capping ss-\u003evrange.max\n- update to NSS 3.122.1\n   * improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.\n   * Improving the allocation of S/MIME DecryptSymKey.\n   * store email on subject cache_entry in NSS trust domain.\n   * Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.\n   * Improve size calculations in CMS content buffering.\n   * avoid integer overflow while escaping RFC822 Names.\n   * Reject excessively large ASN.1 SEQUENCE OF in quickder.\n   * Deep copy profile data in CERT_FindSMimeProfile.\n   * Improve input validation in DSAU signature decoding.\n   * avoid integer overflow in RSA_EMSAEncodePSS.\n   * Add a maximum cert uncompressed len and tests.\n   * Clarify extension negotiation mechanism for TLS Handshakes.\n   * make ss-\u003essl3.hs.cookie an owned-copy of the cookie.\n- update to NSS 3.122\n  * ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.\n  * run mach doc-lint from generate_release_doc.py.\n  * Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.\n  * tls13_CopyEchConfigs uses PR_LIST_TAIL instead of loop variable.\n  * fix cipher spec count intermittent CI failures.\n  * fix Mlkem768x25519ShareDamager intermittent CI failures.\n  * lint the legacy documentation.\n  * lint the NSS 3.112.3 release notes.\n  * add a doc-lint CI job.\n  * Add more useful coverage reports to CI and fail if new commit isn't tested.\n  * wrong alert for malformed TLS 1.3 Finished.\n  * Swap order of asserts and state check.\n  * set correct value of unused curve parameters in tls13_HandleKeyShare.\n  * GCM needs to check for various limits in FIPS mode.\n  * Get Key Length not working from ED and Montgomery keys.\n  * Not all ike modes are FIPS approved. Adjust the indicators when they aren't.\n  * fix intermittent ssl.sh test failures on windows runners.\n  * FIPS indicators on HKDF needs to be restricted to TLS usage.\n  * Generate keys not getting indicators.\n  * improve error handling in smime_init_once.\n  * Detect CPU features on OpenBSD using elf_aux_info.\n  * RSA_EMSAEncodePSS should validate the length of mHash.\n  * more robustly distinguish SFTKSessionObject and SFTKTokenObjects.\n  * fix missing .S file error in Solaris Makefile builds.\n  * fix memory leak in NSC_GenerateKey error path.\n  * Missing SECFailure return after FATAL_ERROR in tls13_HandleEncryptedExtensions.\n  * release xmit buf lock on dtls13_MaybeSendKeyUpdate error paths.\n  * release 1stHandshakeLock on SSL_ResetHandshake error path.\n  * avoid null deref in mp_div_d sign normalization.\n  * Temp private key lifecycle is broken.\n  * protect rwSessionCount with slotLock.\n  * Remove invalid PORT_Free().\n  * Fix intermittent ClientGreaseKeyShare test failure.\n  * Fix kCtxStr len passed to tls_SignOrVerifyUpdate.\n  * patch upstream acvp-rust during checkout to avoid build failures.\n  * update acvp Dockerfile.\n  * CKA_PARAM_SET missing from the CK_ULONG list in softoken.\n  * CKA_SEED missing from isPrivate in the database.\n  * update abicheck expectation for __nss_InitLock.\n  * taskcluster: set NSS_DISABLE_LIBPKIX=1 in test env for static builds.\n  * tests: fix setup_policy to use ROOTCERTSFILE for root cert module path.\n  * tests: fix selfserv/httpserv PID handling and wait exit code for MSYS_NT.\n  * tests: add native_path helper for cross-platform path conversion.\n  * tstclnt, strsclnt: avoid DNS lookup for loopback addresses on Windows.\n  * avoid platform GCM for x64 iOS emulator builds.\n  * remove lock instrumentation feature.\n  * Move FIPS indicator structures out of fips_algorithms.h.\n  * all.sh is failing in FIPS SSL test in main tree.\n  * fix memory leaks in crmf tests.\n  * fix unsatisfiable condition in lg_getTrust.\n  * allow selfserv makefile build to use system zlib.\n  * Add allocation limit to pkcs12 decoding.\n  * Add text/html single-line example emails to NSS S/SMIME CMS tests.\n- update to NSS 3.121\n  * update vendored zlib to v1.3.2.\n  * Revert the unnecessary changes to intel-gcm-wrap.gyp.\n  * Use C fallback for AES-GCM on MinGW builds.\n  * fix ML-KEM PCT.\n  * Extend NSS Fuzzing docs.\n  * avoid integer overflow in platform-independent ghash.\n  * Fix errant whitespace in OISTE Server Root RSA G1 nickname.\n  * fix build with glibc-2.43 assignment discards 'const'\n                  qualifier from pointer.\n  * add gcm.gyp dependency for Solaris SPARC builds.\n  * Set nssckbi version to 2.84.\n  * Add e-Szigno TLS Root CA 2023 to NSS.\n  * allow manual selection of CPU_ARCH=x86_64 and ppc64\n                  in coreconf/Darwin.mk.\n  * Update cryptofuzz version.\n  * Paranoia assert.\n  * Darwin compatibility for intel-aes.S and intel-gcm.S.\n  * rename intel-{aes,gcm}.s to .S.\n  * rename C files for platform-specific ghash implementations.\n  * simplify compilation of platform-specific GCM and GHASH.\n  * FORWARD_NULL null deref of worker in p7decode.c\n                  (sec_pkcs7_decoder_abort_digests).\n  * Out-of-Bounds Read in ML-DSA Private Key Parsing\n                  (zero-length privateKey).\n- update to NSS 3.120.1\n  * no upstream releasenotes\n- update to NSS 3.120\n  * Fix docs generation bug.\n  * CID 1678226: Dereferencing null pointer plaintext.data().\n  * Run PKCS12 fuzz target with --fuzz=tls in CI.\n  * Allowing RT be started several times.\n  * move linux decision and build tasks to d2g worker pools.\n- Revert back to original naming scheme of tarballs\n- update to NSS 3.119.1\n  * restore coreconf/Darwin.mk behavior for intel archs\n- update to NSS 3.119\n  * Fix ml-dsa return value for  SECKEY_PrivateKeyStrengthInBits.\n  * Make sure we don't accept ECH if the HRR cookie is ill-formatted.\n  * Add a pkcs12 fuzzer with crypto stubbed out.\n  * handle errors while setting sanitizers cflags in build.\n  * Ignore IVs for AES KW.\n  * Update Cryptofuzz version.\n  * Fix incorrect logic for SNI selection when ECH is available but disabled.\n  * fix forwarding of sqlite_libs in sqlite.gyp.\n  * fix CPU_ARCH setting for arm64 makefile builds.\n  * remove unused calcThreads variable from cmd/rsaperf.\n  * Solving the incorrect tests introduced by extending EKU.\n  * Memory leaks in pkcs12 and pkcs7 decoders.\n  * Extending parsing with Microsoft Document Signing EKU.\n  * Extending parsing with Adobe Document Signing EKU.\n  * Extending pkix parsing with document signing EKUs.\n  * fix compilation failure on ia32.\n  * use hardware x64 GCM in static builds.\n  * separate ppc sha512 library from ppc gcm library.\n  * simplify cross-compilation from build.sh.\n  * use clang's integrated assembler.\n  * remove unused MP_IS_LITTLE_ENDIAN defines.\n  * fix logic for disabling altivec in gyp builds.\n  * free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.\n  * Add TLS interoperability tests with openssl and gnutls.\n  * Ensure we don't send a DTLS1.3 cookie after DTLS1.2 HelloVerifyRequest.\n  * add failure checks to pk11_mergeTrust() .\n  * pk11wrap selects incorrect slot for CKM_ML_KEM*.\n- Adjusted for changed naming scheme of tarballs for this release by upstream\n- update to NSS 3.118.1\n  * pk11wrap selects incorrect slot for CKM_ML_KEM*\n- update to NSS 3.118\n  * Remove four Commscope root certificates from NSS\n  * fix try pushes with --nspr-patch to actually apply the patch\n  * Support for NIST Curves compressed points\n  * Destroy certificate on error paths\n  * Move NSS DB password hash away from SHA-1\n  * support secp384r1mlkem1024\n  * vendor latest ML-KEM code from libcrux\n  * add mlk-kem-1024 tests\n  * use the correct directory for FStar_UInt_8_16_32_64.h in source consistency test\n  * Move scripts to python3\n  * add mlkem1024 support in freebl\n  * support secp256r1mlkem768\n  * Make mlkem768x25519 the default\n  * ML-DSA SGN and VFY interfaces\n  * Align FIPS interfaces count with array\n  * Ensure CKK_ML_KEM has derive CK_FALSE\n  * Add script for tagging an NSS release\n  * Remove the globals from nss-release-helper.py\n  * Add release helper command for generating the release index\n  * Add release helper command for generating a release note\n  * Add release helper command for freezing a branch\n- update to NSS 3.117\n  * fix memory leak in secasn1decode_unittest.cc\n  * Add OISTE roots\n  * Add runbook for certdata.txt changes\n  * dbtool: close databases before shutdown\n  * SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates\n  * don’t flush base64 when buffer is null\n  * Set use_pkcs5_pbkd2_params2_only=1 for fuzzing builds\n  * mozilla::pkix: recognize the qcStatements extension for QWACs\n  * Fix a big-endian-problematic cast in zlib calls\n  * Revert removing out/ directory after ossfuzz build\n  * Add Cryptofuzz to OSS-Fuzz build\n  * Add PKCS#11 trust tests\n  * final disable dsa patch cert.sh\n  * ml-dsa: move tls 1.3 to use streaming signatures\n  * ml-dsa: Prep Create a FindOidTagByString function\n  * ml-dsa: softoken changes\n  * ml-dsa: der key decode\n  * ml-dsa: Prep colapse the overuse of keyType outside of pk11wrap and cryptohi\n  * ml-dsa: Prep Create a CreateSignatureAlgorithmID function\n- update to NSS 3.116\n  * disable DSA in NSS script tests\n  * Disabling of some algorithms: generic cert.sh\n  * Need to update to new mechanisms\n  * Add ML-DSA public key printing support in NSS command-line utilities\n  * note embedded scts before revocation checks are performed\n  * Add support for ML-DSA keys and mechanisms in PKCS#11 interface\n  * Add support for ML-DSA key type and public key structure\n  * Enable ML-DSA integration via OIDs support and SECMOD flag\n  * disable kyber\n  * Implement PKCS #11 v3.2 PQ functions (use verify signature)\n  * Disable dsa - gtests\n  * make group and scheme support in test tools generic\n  * Create GH workflow to automatically close PRs\n  * Disable dsa - base code\n  * Disabling of some algorithms: remove dsa from pk11_mode\n  * Disable seed and RC2 bug fixes\n  * restore support for finding certificates by decoded serial number\n  * avoid CKR_BUFFER_TO_SMALL error in trust lookups\n  * lib/softtoken/{sdb.c,sftkdbti.h}: Align sftkdb_known_attributes_size type\n  * Use PKCS #11 v3.2 KEM mechanisms and functions\n- update to NSS 3.115.1\n  * restore support for finding certificates by decoded serial number.\n  * avoid CKR_BUFFER_TO_SMALL error in trust lookups.\n- update to NSS 3.115\n  * CID 1648399 - Resource leak in shlibsign.c\n  * CKA_SEED needs to be marked as a private attribute\n  * Fix bad syntax on Windows in softoken_gtest.cc\n  * Key private/public/secret keys by key type in softoken keydb\n  * add PK11_HPKE_GetSharedSecret to abi-check expected report\n  * remove NetscapeStepUpMatchesServerAuth from mozpkix TrustDomain\n  * Fixup ABI\n  * add ECH_SECRET and ECH_CONFIG to SSLKEYLOG for both client and server\n  * ECH fuzz target\n  * Implement PKCS #11 v3.2 FIPS indicator and validation objects\n  * remove expired explicitly distrusted DigiNotar lookalike root\n  * Implement PKCS #11 v3.2 functions\n- update to NSS 3.114\n  * NSS 3.114 source distribution should include NSPR 4.37\n  * Prevent leaks during pkcs12 decoding\n  * Remove redundant assert in p7local.c\n  * Bump nssckbi version to 2.80\n  * Remove expired Baltimore CyberTrust Root\n  * Add TrustAsia Dedicated Roots to NSS\n  * Add SwissSign 2022 Roots to NSS\n  * Add backwards compatibility for CK_PKCS5_PBKD2_PARAMS\n  * Implement PKCS #11 v3.2 trust objects in softoken\n  * Implement PKCS #11 v3.2 trust objects - nss proper\n  * remove dead code in ssl3con.c\n  * DTLS (excl DTLS1.3) Changing Holddown timer logic\n  * Bump nssckbi version to 2.79\n  * remove unneccessary assertion\n  * Update mechanisms for Softoken PCT\n  * convert Chunghwa Telecom ePKI Root removal to a distrust after\n  * Ensure ssl_HaveRecvBufLock and friends respect opt.noLocks\n  * use -O2 for asan build\n  * Fix leaking locks when toggling SSL_NO_LOCKS\n  * remove out-of-function semicolon\n  * Extend pkcs8 fuzz target\n  * Extend pkcs7 fuzz target\n  * Remove unused assignment to pageno\n  * Remove unused assignment to nextChunk\n  * don't run commands as part of shell `local` declarations\n  * fix sanitizer setup\n  * don't silence ssl_gtests output when running with coverage\n  * Release docs and housekeeping\n  * migrate to new linux tester pool\n- rebase FIPS patches to adjust for upstream FIPS work\n- update to NSS 3.113\n  * Fix alias for mac workers on try.\n  * bmo#198090 - Part 1: Use AES in the SDR (NSS) r=simonf,nss-reviewers,rrelyea\n  * Bump nssckbi version to 2.78.\n  * Turn off Websites Trust Bit for Chunghwa Telecom ePKI Root in FF 141.\n  * fix frame pointers in intel-gcm.s.\n  * Typo in release notes for NSS 101.4.\n  * Improve nss-release-helper.py.\n  * shlibsign is broken in System FIPS mode.\n  * Need up update NSS for PKCS 3.1: Move IPSEC to 3.1\n  * PKCS #11 v3.2 header files.\n\n","status":"published","published":"2026-09-14T07:42:47Z","modified":"2026-09-28T18:23:12.559919491Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4156-1","title":"Security update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen","description":"This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues:\n\nChanges in MozillaFirefox:\n\nFirefox Extended Support Release 153.2.0 ESR\n\n* Fixed: Various security fixes.\n\n  MFSA 2026-85 (bsc#1278001):\n\n  * CVE-2026-75874: Sandbox escape in the Remote Settings Client component\n  * CVE-2026-84118: Use-after-free in the JavaScript: GC component\n  * CVE-2026-84119: Sandbox escape due to use-after-free in the DOM: Navigation\n    component\n  * CVE-2026-84120: Use-after-free in the Audio/Video component\n  * CVE-2026-84121: Sandbox escape due to use-after-free in the DOM: Security\n    component\n  * CVE-2026-84122: Use-after-free in the Audio/Video component\n  * CVE-2026-84123: Privilege escalation due to use-after-free in the Graphics:\n    WebGPU component\n  * CVE-2026-84124: Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-84125: Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-74952: Privilege escalation in the Application Update component\n  * CVE-2026-84129: Site isolation issue in the DOM: Navigation component\n  * CVE-2026-84130: Information disclosure in the Graphics: WebGPU component\n  * CVE-2026-84131: Privilege escalation due to invalid pointer in the Graphics\n    component\n  * CVE-2026-84132: Information disclosure in the Networking: HTTP component\n  * CVE-2026-84133: Site isolation issue in the DOM: Push Subscriptions component\n  * CVE-2026-84134: Other issue in the Profile Backup component\n  * CVE-2026-84136: Other issue in the DOM: Navigation component\n  * CVE-2026-84137: Spoofing issue in the DOM: Core \u0026 HTML component\n  * CVE-2026-84139: Clickjacking issue in the DOM: Events component\n  * CVE-2026-84140: Site isolation issue in the DOM: Navigation component\n  * CVE-2026-84141: Integer overflow in the Graphics: ImageLib component\n  * CVE-2026-84143: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2\n    and Firefox ESR 140.15\n  * CVE-2026-84144: Internally found bugs fixed in Firefox 155 and Firefox ESR\n    153.2\n  * CVE-2026-84145: Internally found bugs fixed in Firefox 155, Firefox ESR\n    153.2, Firefox ESR 140.15 and Firefox ESR 115.40\n\n  * Fixed: Various security fixes.\n\n  MFSA 2026-77 (bsc#1274867):\n  * CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component\n  * CVE-2026-74935: Privilege escalation in the DOM: Networking component\n  * CVE-2026-74936: Use-after-free in the JavaScript: WebAssembly component\n  * CVE-2026-74937: Use-after-free in the JavaScript: GC component\n  * CVE-2026-74938: Mitigation bypass in the JavaScript: GC component\n  * CVE-2026-74939: Privilege escalation in the DOM: Navigation component\n  * CVE-2026-74940: Use-after-free in the Graphics: Text component\n  * CVE-2026-74941: Privilege escalation in the Graphics: CanvasWebGL component\n  * CVE-2026-74942: Privilege escalation in the Remote Settings Client component\n  * CVE-2026-74943: Use-after-free in the Graphics: ImageLib component\n  * CVE-2026-74944: Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-74945: Information disclosure in the Graphics: Text component\n  * CVE-2026-74946: Privilege escalation due to incorrect boundary conditions in\n    the Graphics: CanvasWebGL component\n  * CVE-2026-74947: Privilege escalation due to invalid pointer in the Graphics\n    component\n  * CVE-2026-74948: Information disclosure in the Graphics component\n  * CVE-2026-74949: Privilege escalation due to use-after-free in the Graphics:\n    Canvas2D component\n  * CVE-2026-74950: Privilege escalation in the Downloads API component\n  * CVE-2026-74953: Privilege escalation in the Networking: Cookies component\n  * CVE-2026-74954: Information disclosure due to side-channel in the Storage:\n    Cache API component\n  * CVE-2026-74955: Privilege escalation in the Request Handling component\n  * CVE-2026-74956: Same-origin policy bypass in the DOM: Service Workers\n    component\n  * CVE-2026-74957: Mitigation bypass in the Safe Browsing component\n  * CVE-2026-74958: Information disclosure in the WebRTC component\n  * CVE-2026-74959: Mitigation bypass in the Storage: Cache API component\n  * CVE-2026-74960: Site isolation issue in the WebExtensions component\n  * CVE-2026-74961: Side-channel in the Web Audio component\n  * CVE-2026-74962: Site isolation issue in the Networking: Cookies component\n  * CVE-2026-74963: Same-origin policy bypass in the Networking: Cookies\n    component\n  * CVE-2026-74964: Integer overflow in the Graphics component\n  * CVE-2026-74965: Privilege escalation in the Shell Integration component\n  * CVE-2026-74966: Information disclosure in the Form Autofill component\n  * CVE-2026-74967: Same-origin policy bypass in the Audio/Video: Playback\n    component\n  * CVE-2026-74968: Site isolation issue in the Graphics: WebRender component\n  * CVE-2026-74969: Use-after-free in the Layout: Text and Fonts component\n  * CVE-2026-74970: Site isolation issue in the Graphics component\n  * CVE-2026-74971: Information disclosure in the DOM: UI Events \u0026 Focus Handling\n    component\n  * CVE-2026-74972: Information disclosure in the DOM: Push Subscriptions\n    component\n  * CVE-2026-74973: Race condition, use-after-free in the Graphics component\n  * CVE-2026-74974: Same-origin policy bypass in the Graphics: ImageLib component\n  * CVE-2026-74976: JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-74977: Integer overflow in the Graphics component\n  * CVE-2026-74978: Clickjacking issue in the Widget component\n  * CVE-2026-74979: Mitigation bypass in the Add-ons Manager component\n  * CVE-2026-74981: Site isolation issue in the Audio/Video: Web Codecs component\n  * CVE-2026-74982: Denial-of-service in the Widget component\n  * CVE-2026-74983: Mitigation bypass in the Data Loss Prevention component\n  * CVE-2026-74984: Race condition in the JavaScript Engine component\n  * CVE-2026-74985: Privilege escalation in the Enterprise Policies component\n  * CVE-2026-74986: Site isolation issue in the CSS Parsing and Computation\n    component\n  * CVE-2026-74987: Internally found bugs fixed in Firefox ESR 140.14, Firefox\n    ESR 153.1 and Firefox 154\n  * CVE-2026-74988: Internally found bugs fixed in Firefox ESR 153.1 and Firefox\n    154\n  * CVE-2026-74990: Internally found bugs fixed in Firefox ESR 115.39, Firefox\n    ESR 140.14, Firefox ESR 153.1 and Firefox 154\n\n- Firefox Extended Support Release 153.0esr ESR\n\n  * New: ## General\n    - Firefox now includes a new profile management system that\n    helps you separate your online life into distinct profiles\n    for work, school, vacation planning, or whatever you choose.\n    Profiles can be customized with names, avatars, and color\n    themes while keeping tabs, bookmarks, passwords, and browsing\n    history separate. Built-in profile backup and restore also\n    makes it easier to migrate to a new device or recover your\n    browsing data.\n    - Split View lets you view two webpages side-by-side in a\n    single browser window, with additional options to quickly\n    open links in Split View, rearrange pages, and search open\n    tabs.\n    - The Firefox address bar has gained several new\n    capabilities, including built-in unit and time zone\n    conversion, quick actions such as muting all browser audio,\n    and direct search results as you type.\n    - Firefox now supports copying links directly to highlighted\n    text on a webpage for easier sharing.\n    - Firefox Settings has been redesigned with improved\n    organization and navigation, making it easier to find and\n    customize browser preferences.\n  * New: ## AI\n    Firefox introduced several new AI-powered features, including\n    on-device tab organization, AI-assisted link previews,\n    integrated AI search, and centralized controls for managing\n    AI features. Whenever possible, these features perform\n    processing locally to help protect user privacy.\n  * New: ## Sidebar and Tabs\n    - Firefox continues to improve tab management with\n    enhancements to vertical tabs, tab groups, and the sidebar.\n    - Tab groups have gained numerous usability improvements,\n    including better support for collapsed groups, previews of\n    grouped tabs, and additional organization options.\n    - Passwords can now be accessed directly from the Firefox\n    sidebar without opening a separate tab.\n    - Firefox now supports copying links from one or multiple\n    background tabs directly from the tab context menu, and\n    multiple tabs can be copied or shared in a single action.\n    - A Send Tab toolbar button is now available through\n    Customize Toolbar.\n  * New: ## Security \u0026 Privacy\n    - Firefox has significantly expanded Fingerprinting\n    Protection, making it harder for websites to uniquely\n    identify users in both Standard and Strict Enhanced Tracking\n    Protection modes.\n    - Enhanced Tracking Protection includes stronger protections\n    against bounce tracking and additional safeguards that\n    restrict websites from accessing local network resources\n    without user permission.\n    - Firefox now uses Safe Browsing V5 for phishing and malware\n    protection.\n    - Firefox Password Manager now uses stronger AES-256\n    encryption to protect stored logins on disk.\n    - Private Browsing has been enhanced with new controls,\n    including the ability to instantly end a private browsing\n    session and temporarily relax tracker blocking for individual\n    sites when needed for compatibility.\n  * New: ## Translations\n    - Firefox has expanded on-device translation support with\n    many additional languages and continued improvements to\n    translation quality.\n    - A dedicated translations page now provides an easy way to\n    perform real-time translations directly within Firefox.\n  * New: ## Accessibility\n    - Firefox continues to improve accessibility with enhanced\n    support for assistive technologies, including Windows UI\n    Automation, improved keyboard navigation, more accessible\n    date and time controls, and better support for mathematical\n    content in PDFs.\n  * New: ## Windows\n    - Firefox now supports installing websites as standalone web\n    apps pinned to the Windows taskbar.\n    - Firefox web apps are also available for Microsoft Store\n    installations.\n    - Firefox now better integrates with Windows location\n    permissions when websites request geolocation access.\n  * New: ## macOS\n    - Firefox now uses a dedicated GPU process by default,\n    improving stability by allowing graphics failures to recover\n    without restarting the browser.\n    - WebGPU is now enabled by default on Apple Silicon Macs.\n  * New: ## Linux\n    - Firefox now supports native fractional scaling on Wayland,\n    improving rendering on high-DPI displays.\n    - Firefox no longer requires a restart after package manager\n    updates and uses less memory on Linux.\n    - Firefox now supports the XDG Base Directory Specification\n    and ships with RPM packages for Red Hat, Fedora, openSUSE,\n    and other RPM-based distributions.\n  * HTML5: - Firefox now supports the View Transitions API for\n    creating smooth animated transitions between application\n    views.\n    - WebGPU support has expanded across supported platforms,\n    including Windows and Apple Silicon Macs.\n    - Added support for several modern web platform APIs,\n    improving compatibility with modern web applications. Notable\n    additions include the Navigation API, URLPattern, Trusted\n    Types, Sanitizer API, and Prioritized Task Scheduling.\n  * Enterprise: - Enterprise administrators can now centrally\n    manage Firefox's Generative AI features through enterprise\n    policy.\n    - Fixed a performance regression affecting native messaging,\n    improving responsiveness for enterprise extensions that\n    communicate with external applications.\n    - Enterprise policy documentation has moved to\n    https://firefox-admin-docs.mozilla.org/.\n  * Fixed: Various security fixes.\n\n  MFSA 2026-68 (bsc#1271649):\n\n  * CVE-2026-16349:\n    Same-origin policy bypass in the DOM: Navigation component\n  * CVE-2026-16350:\n    Incorrect boundary conditions in the Audio/Video: cubeb\n    component\n  * CVE-2026-16362:\n    Use-after-free in the WebRTC: Audio/Video component\n  * CVE-2026-16351:\n    Sandbox escape due to use-after-free in the DOM: Navigation\n    component\n  * CVE-2026-16352:\n    Sandbox escape due to use-after-free in the Disability Access\n    APIs component\n  * CVE-2026-16363:\n    JIT miscompilation in the JavaScript: WebAssembly component\n  * CVE-2026-16364:\n    Incorrect boundary conditions in the Audio/Video: Playback\n    component\n  * CVE-2026-16365:\n    Privilege escalation in the DOM: Workers component\n  * CVE-2026-16366:\n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-16353:\n    Invalid pointer in the DOM: Bindings (WebIDL) component\n  * CVE-2026-16354:\n    Information disclosure in the Graphics: ImageLib component\n  * CVE-2026-16367:\n    Sandbox escape due to invalid pointer in the Disability\n    Access APIs component\n  * CVE-2026-16368:\n    Incorrect boundary conditions in the JavaScript: WebAssembly\n    component\n  * CVE-2026-16369:\n    Integer overflow in the JavaScript: WebAssembly component\n  * CVE-2026-16355:\n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-16356:\n    Sandbox escape due to use-after-free in the Disability Access\n    APIs component\n  * CVE-2026-16357:\n    Incorrect boundary conditions in the Graphics component\n  * CVE-2026-16370:\n    Mitigation bypass in the DOM: Networking component\n  * CVE-2026-16371:\n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-16372:\n    Privilege escalation in the DOM: Content Processes component\n  * CVE-2026-16373:\n    Information disclosure in the Privacy component in Firefox\n    for Android\n  * CVE-2026-16374:\n    Information disclosure in the Framework component in DevTools\n  * CVE-2026-16375:\n    Site isolation issue in the Networking: HTTP component\n  * CVE-2026-16376:\n    Denial-of-service in the Graphics: WebGPU component\n  * CVE-2026-16377:\n    Mitigation bypass in the PDF Viewer component\n  * CVE-2026-16378:\n    Other issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop\n    component\n  * CVE-2026-16379:\n    Privilege escalation in the DOM: Content Processes component\n  * CVE-2026-16358:\n    Site isolation issue in the Graphics: WebRender component\n  * CVE-2026-16380:\n    Mitigation bypass in the Networking component\n  * CVE-2026-16381:\n    Same-origin policy bypass in the Networking: DNS component\n  * CVE-2026-16382:\n    Mitigation bypass in the DOM: Service Workers component\n  * CVE-2026-16383:\n    Mitigation bypass in the DOM: Networking component\n  * CVE-2026-16384:\n    Information disclosure due to uninitialized memory in the\n    Graphics: WebGPU component\n  * CVE-2026-16385:\n    Information disclosure due to uninitialized memory in the\n    Graphics: WebGPU component\n  * CVE-2026-16386:\n    Information disclosure due to uninitialized memory in the\n    Graphics: WebGPU component\n  * CVE-2026-16387:\n    Site isolation issue in the Networking component\n  * CVE-2026-16388:\n    Sandbox escape in the DOM: Networking component\n  * CVE-2026-16389:\n    Incorrect boundary conditions, integer overflow in the\n    Libraries component in NSS\n  * CVE-2026-16390:\n    Mitigation bypass in the Enterprise Policies component\n  * CVE-2026-16391:\n    Information disclosure in the Storage: IndexedDB component\n  * CVE-2026-16392:\n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-16393:\n    Incorrect boundary conditions in the Graphics: WebGPU\n    component\n  * CVE-2026-16359:\n    Incorrect boundary conditions in the Audio/Video: GMP\n    component\n  * CVE-2026-16394:\n    Mitigation bypass in the DOM: Security component\n  * CVE-2026-16395:\n    Integer overflow in the Audio/Video component\n  * CVE-2026-16396:\n    Privilege escalation in WebExtensions\n  * CVE-2026-16397:\n    Clickjacking issue in the WebExtensions component in Firefox\n    for Android\n  * CVE-2026-16398:\n    Site isolation issue in the Graphics component\n  * CVE-2026-16399:\n    Site isolation issue in the DOM: Navigation component\n  * CVE-2026-16400:\n    Information disclosure in the DOM: Security component\n  * CVE-2026-16401:\n    Privilege escalation in the Data Loss Prevention component\n  * CVE-2026-16402:\n    Integer overflow in the Graphics: ImageLib component\n  * CVE-2026-16403:\n    Spoofing issue in the Address Bar component\n  * CVE-2026-16404:\n    Spoofing issue in Firefox for Android\n  * CVE-2026-16405:\n    Information disclosure in the Networking: WebSockets\n    component\n  * CVE-2026-16406:\n    Mitigation bypass in the Networking component\n  * CVE-2026-16407:\n    Mitigation bypass in the DOM: Service Workers component\n  * CVE-2026-16408:\n    Integer overflow in the Audio/Video: Playback component\n  * CVE-2026-16409:\n    Invalid pointer in the Security: PSM component\n  * CVE-2026-16410:\n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-16411:\n    Memory safety bugs fixed in Firefox 153\n  * CVE-2026-16412:\n    Memory safety bugs fixed in Firefox ESR 140.13 and Firefox\n    153\n  * CVE-2026-16360:\n    Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR\n    140.13 and Firefox 153\n\n  * Fixed: Various security fixes.\n\n  MFSA 2026-76 (bsc#1274867):\n\n  * CVE-2026-74934:\n    Site isolation issue in the Graphics: CanvasWebGL component\n  * CVE-2026-74935:\n    Privilege escalation in the DOM: Networking component\n  * CVE-2026-74936:\n    Use-after-free in the JavaScript: WebAssembly component\n  * CVE-2026-74939:\n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-74940:\n    Use-after-free in the Graphics: Text component\n  * CVE-2026-74941:\n    Privilege escalation in the Graphics: CanvasWebGL component\n  * CVE-2026-74942:\n    Privilege escalation in the Remote Settings Client component\n  * CVE-2026-74943:\n    Use-after-free in the Graphics: ImageLib component\n  * CVE-2026-74944:\n    Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-74945:\n    Information disclosure in the Graphics: Text component\n  * CVE-2026-74946:\n    Privilege escalation due to incorrect boundary conditions in\n    the Graphics: CanvasWebGL component\n  * CVE-2026-74948:\n    Information disclosure in the Graphics component\n  * CVE-2026-74949:\n    Privilege escalation due to use-after-free in the Graphics:\n    Canvas2D component\n  * CVE-2026-74953:\n    Privilege escalation in the Networking: Cookies component\n  * CVE-2026-74957:\n    Mitigation bypass in the Safe Browsing component\n  * CVE-2026-74959:\n    Mitigation bypass in the Storage: Cache API component\n  * CVE-2026-74960:\n    Site isolation issue in the WebExtensions component\n  * CVE-2026-74962:\n    Site isolation issue in the Networking: Cookies component\n  * CVE-2026-74963:\n    Same-origin policy bypass in the Networking: Cookies\n    component\n  * CVE-2026-74964:\n    Integer overflow in the Graphics component\n  * CVE-2026-74965:\n    Privilege escalation in the Shell Integration component\n  * CVE-2026-74967:\n    Same-origin policy bypass in the Audio/Video: Playback\n    component\n  * CVE-2026-74969:\n    Use-after-free in the Layout: Text and Fonts component\n  * CVE-2026-74971:\n    Information disclosure in the DOM: UI Events \u0026 Focus Handling\n    component\n  * CVE-2026-74972:\n    Information disclosure in the DOM: Push Subscriptions\n    component\n  * CVE-2026-74973:\n    Race condition, use-after-free in the Graphics component\n  * CVE-2026-74974:\n    Same-origin policy bypass in the Graphics: ImageLib component\n  * CVE-2026-74976:\n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-74983:\n    Mitigation bypass in the Data Loss Prevention component\n  * CVE-2026-74987:\n    Internally found bugs fixed in Firefox ESR 140.14, Firefox\n    ESR 153.1 and Firefox 154\n  * CVE-2026-74990:\n    Internally found bugs fixed in Firefox ESR 115.39, Firefox\n\t  ESR 140.14, Firefox ESR 153.1 and Firefox 154\n\nChanges in rust-cbindgen:\n\n- Update to version v0.29.4+git0:\n  * Bump version.\n  * tests: Add some tests for constant enums.\n  * ir: Add support for arrays.\n  * ir: Allow constant literals with enum variants.\n  * ir: Use Path for ConstExprs.\n  * Bump version to 0.29.3 and update CHANGES doc\n  * tests: Fix tests with modern gcc.\n  * Use C++ fixed-type enumeration syntax under C23 (or higher) as well\n  * Allow `pub` access to `ReprType` fields\n\n- Update to version 0.29.2+git0:\n  * ci: Add a meta job to block the merge queue on it.\n  * Check for CMSE ABI's as well\n  * Fix doc attribute parsing to properly handle block comments\n  * Expose the line_endings config option to use with the builder\n  * fix env in workflow file\n  * use env to pass output parameters\n  * Explicitly request serde's std features to avoid issues with newer toml versions.\n  * Account for master -\u003e main rename.\n  * Update changelog and bump version.\n  * enum: Track dependencies properly in enumerations.\n\n- Update to version 0.29.2+git0:\n  * Explicitly request serde's std features to avoid issues with newer toml versions.\n  * Account for master -\u003e main rename.\n  * Update changelog and bump version.\n  * enum: Track dependencies properly in enumerations.\n  * Allow must_use if a reason is specified\n  * constant: Handle cfg in associated constants.\n  * tests: Add a test for bitflags + disjoint cfg.\n  * Remove 'display' feature from the toml crate\n  * DOC: Add metatensor\n  * Fix #1085 - Incorrect detection of duplicated constants\n  * chore: More clippy fixes.\n  * docs: Correct after_include type in example config\n  * cargo update\n  * cfg: Remove another clippy warning.\n  * Fix `clippy::uninlined_format_args`\n  * Update toml to 0.9\n  * Release 0.29.0\n  * Support no-export annotation for statics and functions.\n  * conditional fields of constexpr literal structs\n  * Add LiteralStructField\n  * Github action: Add aarch64 to deploy\n  * Add rename rule for generated associated constant\n  * Upgrade heck to 0.5\n  * Add support for an optional nullable attribute\n  * docs.md: Fix deprecated_with_note and deprecated_variant_with_note being spelled as 'notes'\n  * Fix generic with 'void' default\n  * The return of Cast is simplified\n  * Added tests for as keyword inside array into structs\n  * Fixed error generation of structures using the keyword of as inside arrays\n  * Added test for unsafe(no_mangle) attribute\n  * Added tests for unsafe methotd's atributs\n  * Fixed handling of trait methods containing the unsafe attribute\n  * Rename -Zparse-only\n  * Release 0.28.0\n  * tests: Fix symbol file and tests.\n  * Appease clippy.\n  * tests: Run rustfmt.\n\nChanges in mozilla-nspr:\n- update to NSPR 4.39\n  * Improved error handling in PR_CreateThread on Windows\n  * Cleanup and Type-cast fixes for prtime\n  * Remove unused prstreams C++ wrapper from NSPR\n  * Memory poisoning and Arena redzone fixes\n  * Removed emacs/vim modelines and .cvsignore files\n  * Added .editorconfig\n- update to version 4.38.2\n  * Fixed a syntax error in test file parsetm.c, which was\n    introduced in 4.38.1 \n- update to version 4.38.1\n  * Incorrect time value produced by PR_ParseTimeString and\n    PR_ParseTimeStringToExplodedTime if input string doesn't\n    specify seconds. \n- update to version 4.38\n  * Removed support for HPUX and _PR_POLL_WITH_SELECT\n  * Fixed a bug in pt_TCP_SendTo on macOS\n  * Ensure parameter passed to isalpha() is unsigned char \n- update to version 4.37\n  * PR_GetUniqueIdentity asserts on the 32767th call\n  * error LNK2019: unresolved external\n                  symbol _InterlockedCompareExchange\n  * initclk deadline elapsed macOS\n  * Remove prwin.h (formerly known as prwin16.h)\n  * Use builtin atomic functions on RISC-V32/64\n  * PR_FormatTimeUSEnglish() doesn't support '%e'\n                  format specifier\n\nChanges in MozillaFirefox-branding-SLE:\n\n- use suse_version for SLE16 (bsc#1273243)\n- chage version to 153\n- Switch to using xdg-desktop-portal file picker everywhere\n  for SLE-16 and later (bsc#1226112) \n\nChanges in mozilla-nss:\n\n- Fix potential crash in FIPS checks on PBKDF2 password checking (boo#1279863)\n- Fix upper bound to allow FIPS approval for P-521.\n- Approve HKDF and key concatenation in the context of TLS. This enables approved TLS\n  1.3 channels with PQC (bsc#1262698).\n- Don't consider unapproved algorithms for TLS 1.3 in FIPS mode.\n- Mark TLS 1.2 KDF without extended master secret non-approved for FIPS (bsc#1266262).\n- Add patch to prefer any hybrid PQC and send at most one hybrid key share\n  (bsc#1262698).\n- Add a notice to the module ID when it's in non-FIPS mode (bsc#1266263).\n- Import ML-DSA implementation and related PQC fixes from upstream (bsc#1262698, bsc#1272772).\n- Add power-on self-tests (KATs) for ML-KEM and ML-DSA (bsc#1272773).\n- Add zeroization for ML-KEM, ported from upstream (bsc#1272774).\n- Add zeroization for ML-DSA (bsc#1272774).\n- nss-ml-dsa-test-fixes.patch: Add ML-DSA robustness and test fixes.\n\n- Add PQC algorithms to approved list. Increase approved symmetric keygen floor to 112\n  bits (bsc#1262698). Approve non-NSS-aliased TLS 1.2 mechanisms\n  (bsc#1266262).\n- Apply jitter enablement unconditionally (bsc#1262701).\n\n- update to NSS 3.125\n\n  * Set nssckbi version to 2.88.\n  * Add Cybertrust Japan SecureSign Root CA16.\n  * Remove Email Trust bit from TrustAsia Global Root CA G3 and G4.\n  * Remove Entrust Root Certification Authority.\n  * Remove SecureSign Root CA12.\n  * Initialize ssl3.hs.echOuterExtensions in ssl_NewSocket.\n  * replace references to nss-dev/nss with mozilla/nss.\n  * limit recursion depth in CMS decoder.\n  * clamp input.len to testString size in pk11_mergeSecretKey.\n  * NULL pointer dereference in CERT_MergeExtensions.\n  * CERT_DecodeAVAValue — Integer Overflow in Output Buffer Sizing.\n  * fix two integer overflows on LLP64 systems.\n  * Modify an assertion in ssl3_ClientSendAppProtoXtn.\n  * Import RSA-PSS PKCS#8 private keys.\n  * Add EC Derive fuzz target.\n  * Update fuzz/config/tstclnt_arguments.py.\n  * Add DSAU fuzz target.\n  * Update ASN1 mutators for fuzzing.\n  * Update TLS mutators for fuzzing.\n  * Update TLS certs for fuzzing.\n  * Update TLS config for fuzzing.\n  * Extend QuickDER fuzz target.\n  * Extend PKCS12 fuzz target.\n  * Extend PKCS8 fuzz target.\n  * Extend certDN fuzz target.\n  * Update ASN1 fuzz target.\n  * Extend PKCS7 fuzz target.\n  * Bounds-check wrap index in PK11_GetWrapKey to match PK11_SetWrapKey.\n  * Adding a guard against integer overflow in AESKeyWrap_EncryptKWP.\n  * Add an integer overflow guard in UpdateBase64Decoder.\n  * Void out the fd.release in reconfig tests.\n  * make sftk_FindAttribute return a copy.\n  * Converted nss parameter schema from voluptuous to msgspec.\n  * bmo#311577 - drop slot monitor in PK11_ResetToken before calling PK11_InitToken.\n  * adjust the code to use nspr from github.\n  * avoid deadlock when PK11_IsLoggedIn is called from PK11_DoPassword.\n  * test pk11auth.c functions with a non-threadsafe module.\n  * bmo#311577 - PK11_InitPin sets slot-\u003elastLoginCheck without holding the slot monitor.\n  * reject empty nickname in PK11_TraverseCertsForNicknameInSlot.\n  * validate encoded EC params length and tag in SECKEY_ECParamsToKeySize/BasePointOrderLen.\n  * guard space subtraction in ssl_CallCustomExtensionSenders.\n  * rewrite labelLen bound in tls13_HkdfExpandLabelGeneral to avoid unsigned overflow.\n  * bound usageCount in PK11_UnwrapPrivKey to keyTemplate capacity.\n  * Set tail pointer to null in static slot lists when deallocating.\n  * avoid leaving a dangling ss-\u003esec.ci.sid on allocation failure.\n  * guard against integer overflow in CERT_Hexify.\n  * Reject empty SECItem inputs in sftk_IsSafePrime before indexing data[len-1].\n  * NUL-terminate within filename field in jar_listtar to bound the filename scan.\n  * Widen CERT_FormatName length accumulator from unsigned to size_t.\n  * Bound IKE PRF nonce lengths to prevent CK_ULONG to unsigned int truncation.\n  * Drop companion arrays on length mismatch in NSS_CMSArray_Sort instead of asserting.\n  * Operate on a NUL-terminated copy in jar_parse_any to keep manifest scans bounded.\n  * Reject MD2 contexts with unusedBuffer \u003e MD2_BUFSIZE in Update and End.\n  * Reserve NUL terminator for CKA_NSS_URL in nssCKObject_GetAttributes.\n  * Guard padding read against empty output in SEC_PKCS7DecryptContents.\n  * Guard against keySize overflow in IKE PRF/PRF+ output sizing.\n  * Allocate values array when overwriting an empty CMS attribute.\n  * Validate CKA_TOKEN attribute size in nssCKFWObject_SetAttribute.\n  * Validate CKA_CERTIFICATE_TYPE ulValueLen in nss_cert_type_from_ck_attrib.\n  * Handle zero-length input in PrepareBitStringForEncoding.\n  * Length-check raw_manifest before PORT_Strncasecmp prefix dispatch in JAR_parse_manifest.\n  * Reject CKA_NSS_MODULE_SPEC values that aren’t NUL-terminated within ulValueLen.\n  * Reject negative PR_Read returns in JAR_digest_file and jar_create_pk7.\n  * Update Bogo tests to 3fff7111b0eca817466e121059cb4e8b67ade35b.\n  * doc: import NSS:TryServer wiki page in the tree.\n  * improve PK11 URI tests.\n  * avoid nested attributeLock acquisition in sftk_CopyObject.\n  * doc: fix a typo in “Community — Network Security Services (NSS)”.\n  * acquire RWLock before key copies in ssl_SetSelfEncryptKeyPair.\n  * Reject empty nickname in PK11_TraverseCertsForNicknameInSlot.\n  * require non-null session pointer in sftk_GetContext.\n  * set session-\u003elastOpWasFIPS while holding session reference.\n  * atomically claim object removal in sftk_DeleteObject.\n  * atomically swap session search in NSC_FindObjects*.\n  * atomically install session contexts in C_*Init.\n  * hold session reference for context lifetime in C_*Update.\n  * align softoken session lock with head-bucket hash.\n  * restore reference counting for SFTKSession.\n\n- update to NSS 3.124\n  * Add test for PKCS7 digest array alignment\n  * Add test for rejection of excessively large ASN.1 SEQUENCE OF in quickder\n  * Add test for CMS content size validation\n  * Add regression tests for DSAU signature decoding\n  * Add test for S/MIME profile lookup on temp certs\n  * Test case for post-handshake auth and many certificate requests\n  * Add test for intra-arena ASan redzones\n  * update nss_status flags one at a time\n  * add defensive info-\u003elen check in PK11_HPKE_SetupS and PK11_HPKE_SetupR\n  * avoid PORT_Strdup in ssl_DecodeResumptionToken\n  * add runtime check on decoded resumption token session id\n  * improve mach try error handling\n  * clang format\n  * add comprehensive SECItem and SECItemArray tests\n  * add bugzilla_cf_status_nss.py script\n  * regenerate some recent release notes\n  * fix bug list output by release note and email scripts\n  * test removal from trust domain email cache\n  * fix 'testing if key corruption is detected in attribute' failures with sqlite-3.53.0\n  * build sqlite3 shell for Windows CI runners\n  * avoid race with module unloading in NSSTrustDomain_FindTokensByURI\n  * add ImportEd25519WithNonEmptyAlgorithmParams test\n  * add CLAUDE.md and .mcp.json\n  * add a mach try command\n  * remove dead condition in sec_asn1d_check_and_subtract_length\n  * avoid integer truncation in nssCKObject_GetAttributes\n  * add defensive input validation to sftk_compute_ANSI_X9_63_kdf\n  * avoid refcount over-release in nssTokenObjectCache error path [@ nssToken_Destroy]\n  * sdb: enforce that metaData's id key is unique when reading\n  * improve handling of escape sequences in pk11uri_ParseAttributes\n  * use correct data for ID comparison in transfer_uri_certs_to_collection\n  * fix truncation of ulValueLen in sdb_FindObjectsInit\n  * reject DTLS 1.3 Server Hello after HVR without capping ss-\u003evrange.max\n  * set previous-nss-release for abicheck\n  * Skip `PR_Sleep` yield for non-blocking sockets in `ssl3_SendApplicationData`\n  * consistently protect PK11SlotInfo::maxKeyCount with freeListLock\n  * Remove CRMF from testing and manifests\n  * Remove unused RSA blind signature implementation from freebl\n- update to NSS 3.123.1\n  * reject DTLS 1.3 Server Hello after HVR without\n    capping ss-\u003evrange.max\n- update to NSS 3.123\n  * https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/AW6VHkn6E0o\n- update to NSS 3.122.2:\n  * reject DTLS 1.3 Server Hello after HVR without\n    capping ss-\u003evrange.max\n- update to NSS 3.122.1\n   * improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.\n   * Improving the allocation of S/MIME DecryptSymKey.\n   * store email on subject cache_entry in NSS trust domain.\n   * Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.\n   * Improve size calculations in CMS content buffering.\n   * avoid integer overflow while escaping RFC822 Names.\n   * Reject excessively large ASN.1 SEQUENCE OF in quickder.\n   * Deep copy profile data in CERT_FindSMimeProfile.\n   * Improve input validation in DSAU signature decoding.\n   * avoid integer overflow in RSA_EMSAEncodePSS.\n   * Add a maximum cert uncompressed len and tests.\n   * Clarify extension negotiation mechanism for TLS Handshakes.\n   * make ss-\u003essl3.hs.cookie an owned-copy of the cookie.\n- update to NSS 3.122\n  * ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.\n  * run mach doc-lint from generate_release_doc.py.\n  * Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.\n  * tls13_CopyEchConfigs uses PR_LIST_TAIL instead of loop variable.\n  * fix cipher spec count intermittent CI failures.\n  * fix Mlkem768x25519ShareDamager intermittent CI failures.\n  * lint the legacy documentation.\n  * lint the NSS 3.112.3 release notes.\n  * add a doc-lint CI job.\n  * Add more useful coverage reports to CI and fail if new commit isn't tested.\n  * wrong alert for malformed TLS 1.3 Finished.\n  * Swap order of asserts and state check.\n  * set correct value of unused curve parameters in tls13_HandleKeyShare.\n  * GCM needs to check for various limits in FIPS mode.\n  * Get Key Length not working from ED and Montgomery keys.\n  * Not all ike modes are FIPS approved. Adjust the indicators when they aren't.\n  * fix intermittent ssl.sh test failures on windows runners.\n  * FIPS indicators on HKDF needs to be restricted to TLS usage.\n  * Generate keys not getting indicators.\n  * improve error handling in smime_init_once.\n  * Detect CPU features on OpenBSD using elf_aux_info.\n  * RSA_EMSAEncodePSS should validate the length of mHash.\n  * more robustly distinguish SFTKSessionObject and SFTKTokenObjects.\n  * fix missing .S file error in Solaris Makefile builds.\n  * fix memory leak in NSC_GenerateKey error path.\n  * Missing SECFailure return after FATAL_ERROR in tls13_HandleEncryptedExtensions.\n  * release xmit buf lock on dtls13_MaybeSendKeyUpdate error paths.\n  * release 1stHandshakeLock on SSL_ResetHandshake error path.\n  * avoid null deref in mp_div_d sign normalization.\n  * Temp private key lifecycle is broken.\n  * protect rwSessionCount with slotLock.\n  * Remove invalid PORT_Free().\n  * Fix intermittent ClientGreaseKeyShare test failure.\n  * Fix kCtxStr len passed to tls_SignOrVerifyUpdate.\n  * patch upstream acvp-rust during checkout to avoid build failures.\n  * update acvp Dockerfile.\n  * CKA_PARAM_SET missing from the CK_ULONG list in softoken.\n  * CKA_SEED missing from isPrivate in the database.\n  * update abicheck expectation for __nss_InitLock.\n  * taskcluster: set NSS_DISABLE_LIBPKIX=1 in test env for static builds.\n  * tests: fix setup_policy to use ROOTCERTSFILE for root cert module path.\n  * tests: fix selfserv/httpserv PID handling and wait exit code for MSYS_NT.\n  * tests: add native_path helper for cross-platform path conversion.\n  * tstclnt, strsclnt: avoid DNS lookup for loopback addresses on Windows.\n  * avoid platform GCM for x64 iOS emulator builds.\n  * remove lock instrumentation feature.\n  * Move FIPS indicator structures out of fips_algorithms.h.\n  * all.sh is failing in FIPS SSL test in main tree.\n  * fix memory leaks in crmf tests.\n  * fix unsatisfiable condition in lg_getTrust.\n  * allow selfserv makefile build to use system zlib.\n  * Add allocation limit to pkcs12 decoding.\n  * Add text/html single-line example emails to NSS S/SMIME CMS tests.\n- Rebase patches nss-fips-aes-gcm-restrict.patch and nss-fips-approved-crypto-non-ec.patch\n  due to upstreamed FIPS patches\n- update to NSS 3.121\n  * update vendored zlib to v1.3.2.\n  * Revert the unnecessary changes to intel-gcm-wrap.gyp.\n  * Use C fallback for AES-GCM on MinGW builds.\n  * fix ML-KEM PCT.\n  * Extend NSS Fuzzing docs.\n  * avoid integer overflow in platform-independent ghash.\n  * Fix errant whitespace in OISTE Server Root RSA G1 nickname.\n  * fix build with glibc-2.43 assignment discards 'const'\n                  qualifier from pointer.\n  * add gcm.gyp dependency for Solaris SPARC builds.\n  * Set nssckbi version to 2.84.\n  * Add e-Szigno TLS Root CA 2023 to NSS.\n  * allow manual selection of CPU_ARCH=x86_64 and ppc64\n                  in coreconf/Darwin.mk.\n  * Update cryptofuzz version.\n  * Paranoia assert.\n  * Darwin compatibility for intel-aes.S and intel-gcm.S.\n  * rename intel-{aes,gcm}.s to .S.\n  * rename C files for platform-specific ghash implementations.\n  * simplify compilation of platform-specific GCM and GHASH.\n  * FORWARD_NULL null deref of worker in p7decode.c\n                  (sec_pkcs7_decoder_abort_digests).\n  * Out-of-Bounds Read in ML-DSA Private Key Parsing\n                  (zero-length privateKey).\n- update to NSS 3.120.1\n  * no upstream releasenotes\n- update to NSS 3.120\n  * Fix docs generation bug.\n  * CID 1678226: Dereferencing null pointer plaintext.data().\n  * Run PKCS12 fuzz target with --fuzz=tls in CI.\n  * Allowing RT be started several times.\n  * move linux decision and build tasks to d2g worker pools.\n- Revert back to original naming scheme of tarballs\n- update to NSS 3.119.1\n  * restore coreconf/Darwin.mk behavior for intel archs\n- update to NSS 3.119\n  * Fix ml-dsa return value for  SECKEY_PrivateKeyStrengthInBits.\n  * Make sure we don't accept ECH if the HRR cookie is ill-formatted.\n  * Add a pkcs12 fuzzer with crypto stubbed out.\n  * handle errors while setting sanitizers cflags in build.\n  * Ignore IVs for AES KW.\n  * Update Cryptofuzz version.\n  * Fix incorrect logic for SNI selection when ECH is available but disabled.\n  * fix forwarding of sqlite_libs in sqlite.gyp.\n  * fix CPU_ARCH setting for arm64 makefile builds.\n  * remove unused calcThreads variable from cmd/rsaperf.\n  * Solving the incorrect tests introduced by extending EKU.\n  * Memory leaks in pkcs12 and pkcs7 decoders.\n  * Extending parsing with Microsoft Document Signing EKU.\n  * Extending parsing with Adobe Document Signing EKU.\n  * Extending pkix parsing with document signing EKUs.\n  * fix compilation failure on ia32.\n  * use hardware x64 GCM in static builds.\n  * separate ppc sha512 library from ppc gcm library.\n  * simplify cross-compilation from build.sh.\n  * use clang's integrated assembler.\n  * remove unused MP_IS_LITTLE_ENDIAN defines.\n  * fix logic for disabling altivec in gyp builds.\n  * free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.\n  * Add TLS interoperability tests with openssl and gnutls.\n  * Ensure we don't send a DTLS1.3 cookie after DTLS1.2 HelloVerifyRequest.\n  * add failure checks to pk11_mergeTrust() .\n  * pk11wrap selects incorrect slot for CKM_ML_KEM*.\n- Adjusted for changed naming scheme of tarballs for this release by upstream\n- update to NSS 3.118.1\n  * pk11wrap selects incorrect slot for CKM_ML_KEM*\n- update to NSS 3.118\n  * Remove four Commscope root certificates from NSS\n  * fix try pushes with --nspr-patch to actually apply the patch\n  * Support for NIST Curves compressed points\n  * Destroy certificate on error paths\n  * Move NSS DB password hash away from SHA-1\n  * support secp384r1mlkem1024\n  * vendor latest ML-KEM code from libcrux\n  * add mlk-kem-1024 tests\n  * use the correct directory for FStar_UInt_8_16_32_64.h in source consistency test\n  * Move scripts to python3\n  * add mlkem1024 support in freebl\n  * support secp256r1mlkem768\n  * Make mlkem768x25519 the default\n  * ML-DSA SGN and VFY interfaces\n  * Align FIPS interfaces count with array\n  * Ensure CKK_ML_KEM has derive CK_FALSE\n  * Add script for tagging an NSS release\n  * Remove the globals from nss-release-helper.py\n  * Add release helper command for generating the release index\n  * Add release helper command for generating a release note\n  * Add release helper command for freezing a branch\n- update to NSS 3.117\n  * fix memory leak in secasn1decode_unittest.cc\n  * Add OISTE roots\n  * Add runbook for certdata.txt changes\n  * dbtool: close databases before shutdown\n  * SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates\n  * don’t flush base64 when buffer is null\n  * Set use_pkcs5_pbkd2_params2_only=1 for fuzzing builds\n  * mozilla::pkix: recognize the qcStatements extension for QWACs\n  * Fix a big-endian-problematic cast in zlib calls\n  * Revert removing out/ directory after ossfuzz build\n  * Add Cryptofuzz to OSS-Fuzz build\n  * Add PKCS#11 trust tests\n  * final disable dsa patch cert.sh\n  * ml-dsa: move tls 1.3 to use streaming signatures\n  * ml-dsa: Prep Create a FindOidTagByString function\n  * ml-dsa: softoken changes\n  * ml-dsa: der key decode\n  * ml-dsa: Prep colapse the overuse of keyType outside of pk11wrap and cryptohi\n  * ml-dsa: Prep Create a CreateSignatureAlgorithmID function\n- update to NSS 3.116\n  * disable DSA in NSS script tests\n  * Disabling of some algorithms: generic cert.sh\n  * Need to update to new mechanisms\n  * Add ML-DSA public key printing support in NSS command-line utilities\n  * note embedded scts before revocation checks are performed\n  * Add support for ML-DSA keys and mechanisms in PKCS#11 interface\n  * Add support for ML-DSA key type and public key structure\n  * Enable ML-DSA integration via OIDs support and SECMOD flag\n  * disable kyber\n  * Implement PKCS #11 v3.2 PQ functions (use verify signature)\n  * Disable dsa - gtests\n  * make group and scheme support in test tools generic\n  * Create GH workflow to automatically close PRs\n  * Disable dsa - base code\n  * Disabling of some algorithms: remove dsa from pk11_mode\n  * Disable seed and RC2 bug fixes\n  * restore support for finding certificates by decoded serial number\n  * avoid CKR_BUFFER_TO_SMALL error in trust lookups\n  * lib/softtoken/{sdb.c,sftkdbti.h}: Align sftkdb_known_attributes_size type\n  * Use PKCS #11 v3.2 KEM mechanisms and functions\n- update to NSS 3.115.1\n  * restore support for finding certificates by decoded serial number.\n  * avoid CKR_BUFFER_TO_SMALL error in trust lookups.\n- update to NSS 3.115\n  * CID 1648399 - Resource leak in shlibsign.c\n  * CKA_SEED needs to be marked as a private attribute\n  * Fix bad syntax on Windows in softoken_gtest.cc\n  * Key private/public/secret keys by key type in softoken keydb\n  * add PK11_HPKE_GetSharedSecret to abi-check expected report\n  * remove NetscapeStepUpMatchesServerAuth from mozpkix TrustDomain\n  * Fixup ABI\n  * add ECH_SECRET and ECH_CONFIG to SSLKEYLOG for both client and server\n  * ECH fuzz target\n  * Implement PKCS #11 v3.2 FIPS indicator and validation objects\n  * remove expired explicitly distrusted DigiNotar lookalike root\n  * Implement PKCS #11 v3.2 functions\n- update to NSS 3.114\n  * NSS 3.114 source distribution should include NSPR 4.37\n  * Prevent leaks during pkcs12 decoding\n  * Remove redundant assert in p7local.c\n  * Bump nssckbi version to 2.80\n  * Remove expired Baltimore CyberTrust Root\n  * Add TrustAsia Dedicated Roots to NSS\n  * Add SwissSign 2022 Roots to NSS\n  * Add backwards compatibility for CK_PKCS5_PBKD2_PARAMS\n  * Implement PKCS #11 v3.2 trust objects in softoken\n  * Implement PKCS #11 v3.2 trust objects - nss proper\n  * remove dead code in ssl3con.c\n  * DTLS (excl DTLS1.3) Changing Holddown timer logic\n  * Bump nssckbi version to 2.79\n  * remove unneccessary assertion\n  * Update mechanisms for Softoken PCT\n  * convert Chunghwa Telecom ePKI Root removal to a distrust after\n  * Ensure ssl_HaveRecvBufLock and friends respect opt.noLocks\n  * use -O2 for asan build\n  * Fix leaking locks when toggling SSL_NO_LOCKS\n  * remove out-of-function semicolon\n  * Extend pkcs8 fuzz target\n  * Extend pkcs7 fuzz target\n  * Remove unused assignment to pageno\n  * Remove unused assignment to nextChunk\n  * don't run commands as part of shell `local` declarations\n  * fix sanitizer setup\n  * don't silence ssl_gtests output when running with coverage\n  * Release docs and housekeeping\n  * migrate to new linux tester pool\n- rebase FIPS patches to adjust for upstream FIPS work\n- update to NSS 3.113\n  * Fix alias for mac workers on try.\n  * bmo#198090 - Part 1: Use AES in the SDR (NSS) r=simonf,nss-reviewers,rrelyea\n  * Bump nssckbi version to 2.78.\n  * Turn off Websites Trust Bit for Chunghwa Telecom ePKI Root in FF 141.\n  * fix frame pointers in intel-gcm.s.\n  * Typo in release notes for NSS 101.4.\n  * Improve nss-release-helper.py.\n  * shlibsign is broken in System FIPS mode.\n  * Need up update NSS for PKCS 3.1: Move IPSEC to 3.1\n  * PKCS #11 v3.2 header files.\n","status":"published","published":"2026-09-14T09:08:05Z","modified":"2026-09-15T17:00:04.812000192Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4268-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird fixes the following issues:\n\nMozilla Thunderbird 153.2:\n\n  * fixed: Deleting an Exchange account retained the outgoing\n    server settings \n  * fixed: Thunderbird upgrade disabled Settings menu for\n    versions before macOS 13 \n  * fixed: Windows jump list menu no longer functioned correctly\n  * fixed: Security fixes MFSA 2026-88 (bsc#1278001):\n  * CVE-2026-84639 \n    Uninitialized memory in MIME parsing\n  * CVE-2026-84640 \n    One byte overflow read in mail parser\n  * CVE-2026-84641 \n    Information disclosure due to malicious IMAP server response\n  * CVE-2026-84637 \n    Calendar invitation attachments could launch local\n    executables\n  * CVE-2026-84642 \n    Allowed UNC hostnames for attachments interpreted as a\n    regular expression\n  * CVE-2026-75874 \n    Sandbox escape in the Remote Settings Client component\n  * CVE-2026-84118 \n    Use-after-free in the JavaScript: GC component\n  * CVE-2026-84119 \n    Sandbox escape due to use-after-free in the DOM: Navigation\n    component\n  * CVE-2026-84120 \n    Use-after-free in the Audio/Video component\n  * CVE-2026-84121 \n    Sandbox escape due to use-after-free in the DOM: Security\n    component\n  * CVE-2026-84122 \n    Use-after-free in the Audio/Video component\n  * CVE-2026-84123 \n    Privilege escalation due to use-after-free in the Graphics:\n    WebGPU component\n  * CVE-2026-84124 \n    Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-84125 \n    Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-74952 \n    Privilege escalation in the Application Update component\n  * CVE-2026-84129 \n    Site isolation issue in the DOM: Navigation component\n  * CVE-2026-84130 \n    Information disclosure in the Graphics: WebGPU component\n  * CVE-2026-84131 \n    Privilege escalation due to invalid pointer in the Graphics\n    component\n  * CVE-2026-84132 \n    Information disclosure in the Networking: HTTP component\n  * CVE-2026-84133 \n    Site isolation issue in the DOM: Push Subscriptions component\n  * CVE-2026-84134 \n    Other issue in the Profile Backup component\n  * CVE-2026-84136 \n    Other issue in the DOM: Navigation component\n  * CVE-2026-84137 \n    Spoofing issue in the DOM: Core \u0026 HTML component\n  * CVE-2026-84139 \n    Clickjacking issue in the DOM: Events component\n  * CVE-2026-84140 \n    Site isolation issue in the DOM: Navigation component\n  * CVE-2026-84141 \n    Integer overflow in the Graphics: ImageLib component\n  * CVE-2026-84143 \n    Internally found bugs fixed in Thunderbird 155, Thunderbird\n    ESR 153.2 and Thunderbird ESR 140.15\n  * CVE-2026-84144 \n    Internally found bugs fixed in Thunderbird 155 and\n    Thunderbird ESR 153.2\n  * CVE-2026-84145 \n    Internally found bugs fixed in Thunderbird 155, Thunderbird\n    ESR 153.2 and Thunderbird ESR 140.15\n\n- Mozilla Thunderbird 153.1.1\n\n  * fixed: Thunderbird upgrade disabled composition toolbar\n  * fixed: Draft was not preserved when encrypted message send\n    failed \n  * fixed: Account Hub prompted for calendar credentials after\n    successful login \n  * fixed: Thunderbird crash fixes \n  * fixed: Folder compaction showed incorrect disk space recovery\n    estimates \n  * fixed: Thunderbird failed to launch GPU process \n\n- Mozilla Thunderbird 153.1\n\n  * fixed: Autoscroll icon was missing directional arrows in\n    scrollable messages \n  * fixed: Security fixes MFSA 2026-80 (bsc#1274867):\n  * CVE-2026-74934 \n    Site isolation issue in the Graphics: CanvasWebGL component\n  * CVE-2026-74935 \n    Privilege escalation in the DOM: Networking component\n  * CVE-2026-74936 \n    Use-after-free in the JavaScript: WebAssembly component\n  * CVE-2026-74937 \n    Use-after-free in the JavaScript: GC component\n  * CVE-2026-74938 \n    Mitigation bypass in the JavaScript: GC component\n  * CVE-2026-74939 \n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-74940 \n    Use-after-free in the Graphics: Text component\n  * CVE-2026-74941 \n    Privilege escalation in the Graphics: CanvasWebGL component\n  * CVE-2026-74942 \n    Privilege escalation in the Remote Settings Client component\n  * CVE-2026-74943 \n    Use-after-free in the Graphics: ImageLib component\n  * CVE-2026-74944 \n    Use-after-free in the DOM: Core \u0026 HTML component\n  * CVE-2026-74945 \n    Information disclosure in the Graphics: Text component\n  * CVE-2026-74946 \n    Privilege escalation due to incorrect boundary conditions in\n    the Graphics: CanvasWebGL component\n  * CVE-2026-74947 \n    Privilege escalation due to invalid pointer in the Graphics\n    component\n  * CVE-2026-74948 \n    Information disclosure in the Graphics component\n  * CVE-2026-74949 \n    Privilege escalation due to use-after-free in the Graphics:\n    Canvas2D component\n  * CVE-2026-74950 \n    Privilege escalation in the Downloads API component\n  * CVE-2026-74953 \n    Privilege escalation in the Networking: Cookies component\n  * CVE-2026-74954 \n    Information disclosure due to side-channel in the Storage:\n    Cache API component\n  * CVE-2026-74955 \n    Privilege escalation in the Request Handling component\n  * CVE-2026-74956 \n    Same-origin policy bypass in the DOM: Service Workers\n    component\n  * CVE-2026-74957 \n    Mitigation bypass in the Safe Browsing component\n  * CVE-2026-74958 \n    Information disclosure in the WebRTC component\n  * CVE-2026-74959 \n    Mitigation bypass in the Storage: Cache API component\n  * CVE-2026-74960 \n    Site isolation issue in the WebExtensions component\n  * CVE-2026-74961 \n    Side-channel in the Web Audio component\n  * CVE-2026-74962 \n    Site isolation issue in the Networking: Cookies component\n  * CVE-2026-74963 \n    Same-origin policy bypass in the Networking: Cookies\n    component\n  * CVE-2026-74964 \n    Integer overflow in the Graphics component\n  * CVE-2026-74965 \n    Privilege escalation in the Shell Integration component\n  * CVE-2026-74966 \n    Information disclosure in the Form Autofill component\n  * CVE-2026-74967 \n    Same-origin policy bypass in the Audio/Video: Playback\n    component\n  * CVE-2026-74968 \n    Site isolation issue in the Graphics: WebRender component\n  * CVE-2026-74969 \n    Use-after-free in the Layout: Text and Fonts component\n  * CVE-2026-74970 \n    Site isolation issue in the Graphics component\n  * CVE-2026-74971 \n    Information disclosure in the DOM: UI Events \u0026 Focus Handling\n    component\n  * CVE-2026-74972 \n    Information disclosure in the DOM: Push Subscriptions\n    component\n  * CVE-2026-74973 \n    Race condition, use-after-free in the Graphics component\n  * CVE-2026-74974 \n    Same-origin policy bypass in the Graphics: ImageLib component\n  * CVE-2026-74976 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-74977 \n    Integer overflow in the Graphics component\n  * CVE-2026-74978 \n    Clickjacking issue in the Widget component\n  * CVE-2026-74979 \n    Mitigation bypass in the Add-ons Manager component\n  * CVE-2026-74981 \n    Site isolation issue in the Audio/Video: Web Codecs component\n  * CVE-2026-74982 \n    Denial-of-service in the Widget component\n  * CVE-2026-74983 \n    Mitigation bypass in the Data Loss Prevention component\n  * CVE-2026-74984 \n    Race condition in the JavaScript Engine component\n  * CVE-2026-74985 \n    Privilege escalation in the Enterprise Policies component\n  * CVE-2026-74986 \n    Site isolation issue in the CSS Parsing and Computation\n    component\n  * CVE-2026-74987 \n    Internally found bugs fixed in Thunderbird ESR 140.14,\n    Thunderbird ESR 153.1 and Thunderbird 154\n  * CVE-2026-74988 \n    Internally found bugs fixed in Thunderbird ESR 153.1 and\n    Thunderbird 154\n  * CVE-2026-74990 \n    Internally found bugs fixed in Thunderbird ESR 140.14,\n    Thunderbird ESR 153.1 and Thunderbird 154\n\n- Mozilla Thunderbird 153.0.3\n\n  * fixed: Dragging attachments from Local Folders to the desktop\n    failed on Windows \n  * fixed: IMAP tags did not sync automatically across clients\n  * fixed: DisablePasswordReveal policy failed to prevent\n    revealing saved passwords \n  * fixed: Thunderbird could crash when saving a sent Exchange\n    message \n\n- Mozilla Thunderbird 153.0.2\n\n  * changed: Restored previous Yahoo sign-in flow to improve\n    login reliability \n  * fixed: Edit Calendar dialog opened without a window title\n  * fixed: Thunderbird could crash when going offline with active\n    IMAP connection \n\n- Mozilla Thunderbird 153.0.1\n\n  * changed: There are no Thunderbird changes requiring release\n    notes in this release\n\n- Mozilla Thunderbird 153\n\n  MFSA 2026-71 (bsc#1271649):\n  * new: Visual signatures can be added to PDF attachments opened\n    in Thunderbird \n  * new: 'Copy Message Link' and 'Copy News Link' added to header\n    pane 'More actions' \n  * new: Accessiblity is improved in various tree views\n  * new: Added 'Archive' action to mail notifications\n  * new: Add 'Show Full Path' folder pane option for compact view\n    modes \n  * new: Unified folders now display account color indicator with\n    account name tooltip \n  * new: Folder copy enabled within mail server accounts and\n    local folders \n  * new: 'Reset Folder Order' option added to folder pane to\n    reset custom folder sorting \n  * new: Add `mail.useLocalizedFolderNames' to toggle special\n    folder name localization \n  * new: 'Favorites' added as destination for 'Move To' and\n    'File' buttons \n  * new: Composer now shows a warning if user's configured\n    OpenPGP key expires soon \n  * new: Enabled configuration of preferred OpenPGP keyserver via\n    the UI \n  * new: Add `mail.openpgp.load_untested_gpgme_version` to load\n    untested GPGME version \n  * new: Added support for generating Unobtrusive Signatures\n    (OpenPGP) \n  * new: Implemented option to show only messages without any tag\n  * new: Message body search enabled for OpenPGP and S/MIME\n    encrypted messages \n  * new: SecurityDevices enabled in enterprise policies\n  * new: Enable support for DNS over HTTPS \n  * new: OAuth login for mail accounts now opens in default web\n    browser \n  * new: Thundermail services can now be used without installing\n    an add-on \n  * new: OAuth responses now verify issuer fields and reject\n    missing required issuers \n  * new: Enable the 'Sign in with Thundermail' button in Account\n    Hub \n  * new: Account hub is opened on the first run of Thunderbird\n  * new: Account Hub email manual config option added\n  * new: Enable Thundermail OAuth sign-in with account auto-\n    configuration \n  * new: Address book cards can be copied to the clipboard as\n    vCard \n  * new: Enable exporting selected address book cards \n  * new: Custom Accent Color can be chosen in Appearance Settings\n  * new: Enable support for Microsoft Exchange via Exchange Web\n    Services \n  * new: Calendar month/multiweek views are now scrollable with\n    touch screen \n  * new: Tasks can be sorted by created or modified date\n  * new: PDF pages can be reorganized directly in the PDF viewer\n  * changed: 'Copy Message Location' removed from mail context\n    menu \n  * changed: Read folders are now removed from Unread Folders\n    view \n  * changed: Special folders are now localized based on a\n    restricted set of names \n  * changed: OpenPGP public key no longer attached by default in\n    signed-only messages \n  * changed: Address books are now created in Account Hub\n  * changed: Yahoo, AT\u0026T, AOL accounts migrated to OAuth 2.0 with\n    PKCE for improved security \n  * changed: GMail OAuth updated to use PKCE \n  * changed: Skype has been retired and therefore dropped from\n    Address book IM selection \n  * changed: Removed pref `default_supports_diskspace.{HOST}`\n  * changed: Removed pref `default_offline_support_level.{HOST}`\n  * changed: Removed Odnoklassniki chat setup and directed users\n    to XMPP configuration \n  * changed: Use of the string 'Junk' has been replaced with\n    'Spam' \n  * changed: Updated about:rights to replace local with hosted\n    url \n  * changed: Stop shipping 32-bit Linux x86 binaries\n  * changed: 'Hide completed tasks' now also hides cancelled\n    tasks \n  * changed: Stop shipping 32-bit Linux x86 binaries\n  * fixed: Thunderbird could crash when parsing message state\n  * fixed: The English string for the Angry emoji was incorrectly\n    named as the Yell emoji \n  * fixed: Notification sounds did not respect operating system's\n    do-not-disturb mode \n  * fixed: Non-English localized Thunderbird created English\n    special folders on first start \n  * fixed: Copying text from some error alerts was not possible\n  * fixed: Fastmail CalDAV app password access failed due to\n    forced OAuth regression \n  * fixed: Thunderbird could crash in server subscription logic\n  * fixed: Could not distinguish folders with same name in\n    'Recent Destinations' and 'Favorites' \n  * fixed: Donation banner stole focus when Thunderbird was\n    running in the background \n  * fixed: Unknown command-line arguments passed to Thunderbird\n    did not print warning \n  * fixed: Thunderbird could crash when processing new incoming\n    messages \n  * fixed: Spam messages triggered new mail notifications before\n    being moved to Spam folder \n  * fixed: Web pages with bad certificates displayed as blank\n  * fixed: Memory leak after opening New Window from folder pane\n    context menu \n  * fixed: Importing a vCard only displayed VCF files in the file\n    picker \n  * fixed: Calendar view tabs were not properly keyboard\n    accessible \n  * fixed: Ctrl+S did not save PDF attachments opened in\n    Thunderbird tabs \n  * fixed: TLS errors incorrectly reported all unknown failures\n    as untrusted certificates \n  * fixed: Thunderbird could crash when copying an empty list of\n    messages \n  * fixed: Incorrect roaming data directory caused regression on\n    Windows and macOS \n  * fixed: Changing to new drafts folder and then back did not\n    correctly restore the folder \n  * fixed: Message headers were re-downloaded at every startup\n  * fixed: Old IMAP profile migration deleted INBOX and other\n    mailbox files \n  * fixed: 'Search Messages...' dialog could not be opened\n    outside the email tab \n  * fixed: Option did not exist to create new address book under\n    File -\u003e New \n  * fixed: Newly created folder was missing under 'Recent' when\n    moving a message \n  * fixed: Could not compose new message if the folder pane was\n    empty \n  * fixed: 'Delete' was missing from context menu when multiple\n    IMAP folders were selected \n  * fixed: Compacting multiple folders failed and did not compact\n  * fixed: Shift-click for 'Edit' button in drafts header view\n    did not work \n  * fixed: 'Replace All' in Compose did not update plain text\n    until dialog closed \n  * fixed: Status bar messages displayed unlocalized folder names\n    or IMAP mailbox names \n  * fixed: Saved email filenames were not not always cross-\n    platform safe \n  * fixed: Space bar did not scroll in PDF attachments opened\n    from emails \n  * fixed: Folder location widget used non-localised name\n  * fixed: Empty confirmation dialog when more messages opened in\n    tabs than `mailnews.open_tab_warning` \n  * fixed: Removing tags from IMAP messages could fail and tags\n    reappeared after refresh \n  * fixed: Toggling dark message mode did not restore focus and\n    scroll position \n  * fixed: 'Show remote content' did not display remote content\n    for EML message \n  * fixed: Emoji sequences were not properly handled in subject\n    lines \n  * fixed: 'Delete' button in unified toolbar could delete\n    attachments instead of message \n  * fixed: 'Repair text encoding' could duplicate recipient and\n    attachments \n  * fixed: Some IMAP emails showed current time instead of\n    correct received date \n  * fixed: Deleting a single message in folder using 'Group by\n    Sort' failed after CTRL+A \n  * fixed: New newsgroups were not added in alphabetical order by\n    default \n  * fixed: Sorting by threads only brought threads with unread\n    top messages to the top \n  * fixed: News message marked read after NNTP error prevented\n    retrieval from server \n  * fixed: 'Recent destinations' submenu was not sorted by time\n    of modification \n  * fixed: Account column could display incorrect account name\n  * fixed: 'Tag' submenu of mail context menu could be populated\n    incorrectly \n  * fixed: Unified archive subfolders could show wrong names and\n    no messages \n  * fixed: Moving saved search/virtual folder under IMAP could\n    fail \n  * fixed: New Folder dialog allowed invalid folder creation\n    without a selected parent folder \n  * fixed: New/unread messages in collapsed thread were not\n    obvious enough \n  * fixed: Pressing Delete on Trash folder could remove it\n    without confirmation \n  * fixed: Renaming of a 'unified folder' created a duplicate\n  * fixed: Clicking on a folder in the folder pane did not always\n    open folder \n  * fixed: Messages nested deeper than 255 levels disappeared\n    from threading view \n  * fixed: Performing Delete followed by Undo on thread parent\n    message could corrupt view \n  * fixed: Single messages still appeared collapsible after\n    thread members were deleted \n  * fixed: Updated threads remained misordered until folder\n    refresh or resort \n  * fixed: Global search failed to display inaccessible messages\n    found in local folders \n  * fixed: Numeric subfolders were sorted alphabetically instead\n    of naturally \n  * fixed: Virtual folder folder-picker showed unlabeled IM\n    account as selectable folder \n  * fixed: Some folders showed new mail count prior to receiving\n    mail \n  * fixed: Menu Bar -\u003e View contained duplicate accelerator keys\n  * fixed: Unified toolbar Spam button did not switch to 'Not\n    Spam' when spam message selected \n  * fixed: Warning was not logged if\n    `mail.openpgp.alias_rules_file` file did not exist\n  * fixed: Not all headers were signed when creating digitally\n    signed OpenPGP email \n  * fixed: When configuring external GnuPG, user was not promted\n    to import public key \n  * fixed: 'Open and Show' for OpenPGP-signed message (.eml) did\n    not work \n  * fixed: Invalidly signed unencrypted emails were indicated as\n    worse than unsigned ones \n  * fixed: Reason for revoked certificate was not shown\n  * fixed: Apple Mail OpenPGP emails failed to decrypt due to\n    hidden recipient key ID \n  * fixed: OpenPGP import of public key with experimental packets\n    failed with unclear error \n  * fixed: Opening messages with OpenPGP keys was slow and\n    blocked the UI for large keyrings \n  * fixed: OpenPGP key refresh failed when fingerprint lookup\n    returned multiple results \n  * fixed: Encrypted Gmail CSE emails with outer opaque S/MIME\n    were not readable \n  * fixed: Invalid S/MIME encryption certificate caused\n    misleading send errors \n  * fixed: 'Search Messages' search did not finish due to\n    unparsable local folders \n  * fixed: Search results showed older irrelevant emails before\n    newer exact matches \n  * fixed: Filter search on Body missed draft messages containing\n    German umlauts \n  * fixed: Esc cleared quick filter pin after changing folder\n  * fixed: Thunderbird could crash during local message search\n  * fixed: Replying could fail with\n    `mailnews.reply_quoting_selection.multi_word` set false\n  * fixed: Drag-drop of unselected contact inserted wrong or no\n    email address \n  * fixed: Changing identity in compose window caused modified\n    draft not to be saved \n  * fixed: Shift-click 'Compose Message To' on 'mailto' link did\n    not open in plain text \n  * fixed: Reply with selected text lost formatting for HTML\n    messages containing \u0026lt;/pre\u0026gt; \n  * fixed: Multipart/related attachments were not preserved when\n    editing or forwarding \n  * fixed: Forwarded malformed MIME email had empty body and\n    extra attachment \n  * fixed: Message compose window was removed from Task Bar after\n    saving as draft or template \n  * fixed: Dragging email address between compose windows failed\n    to add recipients \n  * fixed: Thunderbird could crash when using Find and Replace\n    All \n  * fixed: Compose with PDF attachments opened PDFs instead of\n    creating a new email \n  * fixed: Multiple saves while using 'Options' -\u003e 'Send a Copy'\n    resulted in multiple copies \n  * fixed: Search for 'Attachment' in Settings menu did not find\n    'Files and Attachments' \n  * fixed: Add-on account creation did not work with Account Hub\n  * fixed: Owl install did not show link to website in Account\n    Hub \n  * fixed: Username field did not appear in Account Hub when\n    exchange authentication failed \n  * fixed: Account Hub advanced config setup did not include\n    default outgoing config \n  * fixed: Disabled inputs could be toggled in Account Hub\n    address book \n  * fixed: Users could not disable spinning overlay in Account\n    Hub for email \n  * fixed: Account Hub local address book creation could continue\n    with blank name \n  * fixed: Account Hub email success messages were not always\n    accurate about config source \n  * fixed: Calendar/address book sections were shown in Account\n    Hub when there were none \n  * fixed: New password-based Exchange accounts failed to save\n    passwords in login manager \n  * fixed: Account hub showed connection security instead of\n    actual authentication method \n  * fixed: New identity dialog lacked reply-matching and end-to-\n    end encryption settings \n  * fixed: Thunderbird could fail to shut down cleanly during\n    active OAuth requests \n  * fixed: Account Hub kept OAuth selected after changing to\n    hostname without OAuth support \n  * fixed: Account Hub autodetect wrongly prompted for a password\n    when auth was unavailable \n  * fixed: Interrupted external OAuth2 setup required restarting\n    Thunderbird \n  * fixed: The default account could be reset after restart if\n    uninitialized \n  * fixed: Virtual folders did not update correctly for filtered\n    POP3 messages \n  * fixed: 'Copy Message to' action in a newsgroup filter did not\n    work \n  * fixed: Thunderbird could crash while importing mail thread\n  * fixed: Thunderbird did not clearly fail when importing\n    profile from a bad source \n  * fixed: Thunderbird could not import profile located at the\n    top level of zip file \n  * fixed: 'Any Number' was unavailable in address book search\n    with 'Match all of the following' \n  * fixed: Contact not found in Advanced Address Book Search if\n    phone number had a period \n  * fixed: Thunderbird did not display contact photos in WebP\n    format from CardDAV servers \n  * fixed: Opening a vCard (.vcf) from file manager or CLI did\n    not work in some cases \n  * fixed: Redirected CardDAV URLs resolved relative URLs against\n    the wrong host \n  * fixed: Installations from Microsoft Store did not open when\n    clicking 'mailto:' links \n  * fixed: Windows new message notification click did not bring\n    Thunderbird to foreground \n  * fixed: Microsoft Store installs did not open when clicking\n    'news://' link or .eml file \n  * fixed: Using thunderbird -compose with double quotes made\n    last email address invalid \n  * fixed: Clicking the backspace icon in the quick filter field\n    cleared the input field \n  * fixed: Subfolder kept stale accessibility unread count after\n    unread messages were deleted \n  * fixed: Moving virtual folder within maildir based IMAP or\n    local folder could fail \n  * fixed: Thunderbird could crash when completing folder\n    copy/move \n  * fixed: 'Edit as New Message' and inline 'Forward' not\n    possible with PGP-signed messages \n  * fixed: Various MIME improvements \n  * fixed: Forwarding some Apple Mail messages incorrectly\n    attached inline text as a file \n  * fixed: Thunderbird could crash when marking all messages as\n    read \n  * fixed: Auto-compaction could corrupt database and cause\n    crashes during syncs \n  * fixed: 'news:' URIs without specific server had incorrect\n    format displayed in status bar \n  * fixed: 'Mark' -\u003e 'All Read' affected newsgroup messages that\n    had not been fetched yet \n  * fixed: Thunderbird could not reconnect to newsgroups after\n    connection loss until restarted \n  * fixed: Sending a newsgroup post appeared successful when it\n    had actually failed \n  * fixed: Saving a new draft retained superceded version\n  * fixed: Thunderbird hung when auto-checking multiple accounts\n    for new messages \n  * fixed: Spam not checked with\n    `mail.server.default.check_all_folders_for_new` on\n  * fixed: Startup could be slow with large number of folders not\n    using subscriptions \n  * fixed: Saved search in unified folder resulted in server\n    error \n  * fixed: Thunderbird did not report refused POP3 connection\n  * fixed: Remove message body retention policy was not\n    functional \n  * fixed: POP3 could stop downloading mail until restart\n  * fixed: With auto-mark-read disabled, large mail still marked\n    as read during load delay \n  * fixed: IMAP 'Show only subscribed folders' could not be\n    changed without restart \n  * fixed: POP3 deadlocked when server went silent without\n    closing socket \n  * fixed: Thunderbird could crash when mail folder was renamed\n    or moved \n  * fixed: NNTP server with invalid TLS certificate could not be\n    added to certificate exceptions \n  * fixed: Cancelled message send could not be retried and hung\n    with SMTP timeout errors \n  * fixed: Corrupted NNTP account data caused excessive memory\n    use and startup crash \n  * fixed: Multiple selected IMAP folders could not be moved or\n    deleted together \n  * fixed: Non-Latin IMAP keywords were lowercased and encoded\n    incorrectly as MUTF-7 \n  * fixed: Message tags were lost when moving folder from local\n    folder to IMAP folder \n  * fixed: Removing a chat account threw an exception and failed\n    to clear the UI \n  * fixed: Enterprise policy use not indicated in\n    about:preferences with link to about:policies \n  * fixed: Language field in settings was empty after restart in\n    Troubleshoot Mode \n  * fixed: Primary Password policy was detected but not enforced\n    for saved account passwords \n  * fixed: Archived RSS feed messages were sent to the archive\n    folder of default identity \n  * fixed: Broken feed icon could prevent updating of feeds\n  * fixed: Task reminders could fail for tasks without end dates\n    or with shifted due dates \n  * fixed: Calendar did not alert user for connection issues\n  * fixed: Copying one recurring event occurrence failed to set\n    the date when pasted \n  * fixed: Could not copy an event in multiweek or month view by\n    drag-and-drop \n  * fixed: Duplicate attendees were added to invitations instead\n    of being filtered out \n  * fixed: Calendar discovery with certificate error displayed\n    multiple exceptions \n  * fixed: It was not possible to create date-only all-day tasks\n  * fixed: Task percentage complete was not preserved separately\n    from status in tooltips \n  * fixed: Calendar invites were incorrectly marked processed\n    after calendar sync completed \n  * fixed: ICS event comments were not displayed in Thunderbird\n    event details \n  * fixed: Dismissed Gmail calendar reminder did nothing and item\n    stayed visible \n  * fixed: iCal imports misread unknown timezones as GMT,\n    creating events at wrong times \n  * fixed: Could not export local calendar as HTML \n  * fixed: Cancelled filter edit dialog closed the message filter\n    dialog \n  * fixed: Visual and UX improvements \n  * CVE-2026-14899 \n    Off-by-one out of bounds read in MIME header parser for\n    forwarding\n  * CVE-2026-16349 \n    Same-origin policy bypass in the DOM: Navigation component\n  * CVE-2026-16350 \n    Incorrect boundary conditions in the Audio/Video: cubeb\n    component\n  * CVE-2026-16362 \n    Use-after-free in the WebRTC: Audio/Video component\n  * CVE-2026-16351 \n    Sandbox escape due to use-after-free in the DOM: Navigation\n    component\n  * CVE-2026-16352 \n    Sandbox escape due to use-after-free in the Disability Access\n    APIs component\n  * CVE-2026-16363 \n    JIT miscompilation in the JavaScript: WebAssembly component\n  * CVE-2026-16364 \n    Incorrect boundary conditions in the Audio/Video: Playback\n    component\n  * CVE-2026-16365 \n    Privilege escalation in the DOM: Workers component\n  * CVE-2026-16366 \n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-16353 \n    Invalid pointer in the DOM: Bindings (WebIDL) component\n  * CVE-2026-16354 \n    Information disclosure in the Graphics: ImageLib component\n  * CVE-2026-16367 \n    Sandbox escape due to invalid pointer in the Disability\n    Access APIs component\n  * CVE-2026-16368 \n    Incorrect boundary conditions in the JavaScript: WebAssembly\n    component\n  * CVE-2026-16369 \n    Integer overflow in the JavaScript: WebAssembly component\n  * CVE-2026-16355 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-16356 \n    Sandbox escape due to use-after-free in the Disability Access\n    APIs component\n  * CVE-2026-16357 \n    Incorrect boundary conditions in the Graphics component\n  * CVE-2026-16370 \n    Mitigation bypass in the DOM: Networking component\n  * CVE-2026-16371 \n    Privilege escalation in the DOM: Navigation component\n  * CVE-2026-16372 \n    Privilege escalation in the DOM: Content Processes component\n  * CVE-2026-16374 \n    Information disclosure in the Framework component in DevTools\n  * CVE-2026-16375 \n    Site isolation issue in the Networking: HTTP component\n  * CVE-2026-16376 \n    Denial-of-service in the Graphics: WebGPU component\n  * CVE-2026-16377 \n    Mitigation bypass in the PDF Viewer component\n  * CVE-2026-16378 \n    Other issue in the DOM: Copy \u0026 Paste and Drag \u0026 Drop\n    component\n  * CVE-2026-16379 \n    Privilege escalation in the DOM: Content Processes component\n  * CVE-2026-16358 \n    Site isolation issue in the Graphics: WebRender component\n  * CVE-2026-16380 \n    Mitigation bypass in the Networking component\n  * CVE-2026-16381 \n    Same-origin policy bypass in the Networking: DNS component\n  * CVE-2026-16382 \n    Mitigation bypass in the DOM: Service Workers component\n  * CVE-2026-16383 \n    Mitigation bypass in the DOM: Networking component\n  * CVE-2026-16384 \n    Information disclosure due to uninitialized memory in the\n    Graphics: WebGPU component\n  * CVE-2026-16385 \n    Information disclosure due to uninitialized memory in the\n    Graphics: WebGPU component\n  * CVE-2026-16386 \n    Information disclosure due to uninitialized memory in the\n    Graphics: WebGPU component\n  * CVE-2026-16387 \n    Site isolation issue in the Networking component\n  * CVE-2026-16388 \n    Sandbox escape in the DOM: Networking component\n  * CVE-2026-16389 \n    Incorrect boundary conditions, integer overflow in the\n    Libraries component in NSS\n  * CVE-2026-16390 \n    Mitigation bypass in the Enterprise Policies component\n  * CVE-2026-16391 \n    Information disclosure in the Storage: IndexedDB component\n  * CVE-2026-16392 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-16393 \n    Incorrect boundary conditions in the Graphics: WebGPU\n    component\n  * CVE-2026-16359 \n    Incorrect boundary conditions in the Audio/Video: GMP\n    component\n  * CVE-2026-16394 \n    Mitigation bypass in the DOM: Security component\n  * CVE-2026-16395 \n    Integer overflow in the Audio/Video component\n  * CVE-2026-16396 \n    Privilege escalation in WebExtensions\n  * CVE-2026-16398 \n    Site isolation issue in the Graphics component\n  * CVE-2026-16399 \n    Site isolation issue in the DOM: Navigation component\n  * CVE-2026-16400 \n    Information disclosure in the DOM: Security component\n  * CVE-2026-16401 \n    Privilege escalation in the Data Loss Prevention component\n  * CVE-2026-16402 \n    Integer overflow in the Graphics: ImageLib component\n  * CVE-2026-16403 \n    Spoofing issue in the Address Bar component\n  * CVE-2026-16405 \n    Information disclosure in the Networking: WebSockets\n    component\n  * CVE-2026-16406 \n    Mitigation bypass in the Networking component\n  * CVE-2026-16407 \n    Mitigation bypass in the DOM: Service Workers component\n  * CVE-2026-16408 \n    Integer overflow in the Audio/Video: Playback component\n  * CVE-2026-16409 \n    Invalid pointer in the Security: PSM component\n  * CVE-2026-16410 \n    JIT miscompilation in the JavaScript Engine: JIT component\n  * CVE-2026-16411 \n    Memory safety bugs fixed in Thunderbird 153\n  * CVE-2026-16412 \n    Memory safety bugs fixed in Thunderbird ESR 140.13 and\n    Thunderbird 153\n  * CVE-2026-16360 \n    Memory safety bugs fixed in Thunderbird ESR 140.13 and\n    Thunderbird 153\n","status":"published","published":"2026-09-18T14:51:02Z","modified":"2026-09-19T09:00:04.375866356Z","updated_at":"2026-11-02T15:54:05.392906Z"}]}}