MGASA-2026-0036

Source
https://advisories.mageia.org/MGASA-2026-0036.html
Import Source
https://advisories.mageia.org/MGASA-2026-0036.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2026-0036
Related
Published
2026-02-11T17:56:31Z
Modified
2026-02-11T18:13:40.824953Z
Summary
Updated thunderbird packages fix security vulnerability
Details

CSS-based exfiltration of the content from partially encrypted emails when allowing remote content. (CVE-2026-0818)

References
Credits

Affected packages

Mageia:9 / thunderbird

Package

Name
thunderbird
Purl
pkg:rpm/mageia/thunderbird?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
140.7.1-1.mga9

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2026-0036.json"

Mageia:9 / thunderbird-l10n

Package

Name
thunderbird-l10n
Purl
pkg:rpm/mageia/thunderbird-l10n?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
140.7.1-1.mga9

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2026-0036.json"