Back Linuxsecurity Ubuntu 22.04 Network Security Update UFW-SEC-2026-0400-7 CVE-2026
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.7.1 MFSA 2026-08 (bsc#1257397): * CVE-2026-0818: CSS-based exfiltration of the content from partially encrypted emails when allowing remote content
## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2026-388=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-388=1 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-388=1
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
zypper in -t patch openSUSE-SLE-15.6-2026-388=1
* SUSE Package Hub 15 15-SP7
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-388=1
* SUSE Linux Enterprise Workstation Extension 15 SP7
zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-388=1
* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-debugsource-140.7.1-150200.8.254.1 * MozillaThunderbird-140.7.1-150200.8.254.1 * MozillaThunderbird-debuginfo-140.7.1-150200.8.254.1 * MozillaThunderbird-translations-other-140.7.1-150200.8.254.1 * MozillaThunderbird-translations-common-140.7.1-150200.8.254.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * MozillaThunderbird-debugsource-140.7.1-150200.8.254.1 * MozillaThunderbird-140.7.1-150200.8.254.1 * MozillaThunderbird-debuginfo-140.7.1-150200.8.254.1 * MozillaThunderbird-translations-other-140.7.1-150200.8.254.1 * MozillaThunderbird-translations-common-140.7.1-150200.8.254.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * MozillaThunderbird-debugsource-140.7.1-150200.8.254.1 * MozillaThunderbird-140.7.1-150200.8.254.1 * MozillaThunderbird-debuginfo-140.7.1-150200.8.254.1 * Read the Full Advisory
* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)
* MozillaThunderbird-debugsource-140.7.1-150200.8.254.1
* MozillaThunderbird-140.7.1-150200.8.254.1
* MozillaThunderbird-debuginfo-140.7.1-150200.8.254.1
* MozillaThunderbird-translations-other-140.7.1-150200.8.254.1
* MozillaThunderbird-translations-common-140.7.1-150200.8.254.1
* SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x)
* MozillaThunderbird-debugsource-140.7.1-150200.8.254.1
* MozillaThunderbird-140.7.1-150200.8.254.1
* MozillaThunderbird-debuginfo-140.7.1-150200.8.254.1
* MozillaThunderbird-translations-other-140.7.1-150200.8.254.1
* MozillaThunderbird-translations-common-140.7.1-150200.8.254.1
* SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64)
* MozillaThunderbird-debugsource-140.7.1-150200.8.254.1
* MozillaThunderbird-140.7.1-150200.8.254.1
* MozillaThunderbird-debuginfo-140.7.1-150200.8.254.1
* bsc#1257397 ## References: * *
*
*
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
