openSUSE-SU-2026:11558-1: moderate: MozillaThunderbird-140.14.0-1.1 on GA media

# MozillaThunderbird-140.14.0-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11558-1
Rating: moderate

Cross-References:

  * CVE-2026-74934
  * CVE-2026-74935
  * CVE-2026-74936
  * CVE-2026-74939
  * CVE-2026-74940
  * CVE-2026-74941
  * CVE-2026-74942
  * CVE-2026-74943
  * CVE-2026-74944
  * CVE-2026-74945
  * CVE-2026-74946
  * CVE-2026-74948
  * CVE-2026-74949
  * CVE-2026-74953
  * CVE-2026-74957
  * CVE-2026-74959
  * CVE-2026-74960
  * CVE-2026-74962
  * CVE-2026-74963
  * CVE-2026-74964
  * CVE-2026-74965
  * CVE-2026-74967
  * CVE-2026-74969
  * CVE-2026-74971
  * CVE-2026-74972
  * CVE-2026-74973
  * CVE-2026-74974
  * CVE-2026-74976
  * CVE-2026-74983
  * CVE-2026-74987
  * CVE-2026-74990



CVSS scores:

  * CVE-2026-74934 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
  * CVE-2026-74935 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
  * CVE-2026-74936 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
  * CVE-2026-74963 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  * CVE-2026-74990 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products:

  * openSUSE Tumbleweed


An update that solves 31 vulnerabilities can now be installed.

## Description:

These are all security issues fixed in the MozillaThunderbird-140.14.0-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

  * openSUSE Tumbleweed:
    * MozillaThunderbird 140.14.0-1.1
    * MozillaThunderbird-openpgp-librnp 140.14.0-1.1
    * MozillaThunderbird-translations-common 140.14.0-1.1
    * MozillaThunderbird-translations-other 140.14.0-1.1

## References:

  * https://www.suse.com/security/cve/CVE-2026-74934.html
  * https://www.suse.com/security/cve/CVE-2026-74935.html
  * https://www.suse.com/security/cve/CVE-2026-74936.html
  * https://www.suse.com/security/cve/CVE-2026-74939.html
  * https://www.suse.com/security/cve/CVE-2026-74940.html
  * https://www.suse.com/security/cve/CVE-2026-74941.html
  * https://www.suse.com/security/cve/CVE-2026-74942.html
  * https://www.suse.com/security/cve/CVE-2026-74943.html
  * https://www.suse.com/security/cve/CVE-2026-74944.html
  * https://www.suse.com/security/cve/CVE-2026-74945.html
  * https://www.suse.com/security/cve/CVE-2026-74946.html
  * https://www.suse.com/security/cve/CVE-2026-74948.html
  * https://www.suse.com/security/cve/CVE-2026-74949.html
  * https://www.suse.com/security/cve/CVE-2026-74953.html
  * https://www.suse.com/security/cve/CVE-2026-74957.html
  * https://www.suse.com/security/cve/CVE-2026-74959.html
  * https://www.suse.com/security/cve/CVE-2026-74960.html
  * https://www.suse.com/security/cve/CVE-2026-74962.html
  * https://www.suse.com/security/cve/CVE-2026-74963.html
  * https://www.suse.com/security/cve/CVE-2026-74964.html
  * https://www.suse.com/security/cve/CVE-2026-74965.html
  * https://www.suse.com/security/cve/CVE-2026-74967.html
  * https://www.suse.com/security/cve/CVE-2026-74969.html
  * https://www.suse.com/security/cve/CVE-2026-74971.html
  * https://www.suse.com/security/cve/CVE-2026-74972.html
  * https://www.suse.com/security/cve/CVE-2026-74973.html
  * https://www.suse.com/security/cve/CVE-2026-74974.html
  * https://www.suse.com/security/cve/CVE-2026-74976.html
  * https://www.suse.com/security/cve/CVE-2026-74983.html
  * https://www.suse.com/security/cve/CVE-2026-74987.html
  * https://www.suse.com/security/cve/CVE-2026-74990.html