-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 14 Apr 2026 07:06:54 +0200
Source: thunderbird
Architecture: source
Version: 1:140.9.1esr-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Christoph Goehre <chris@sigxcpu.org>
Changes:
thunderbird (1:140.9.1esr-1) unstable; urgency=medium
.
* [49731f6] New upstream version 140.9.1esr
Fixed CVE issues in upstream version 140.9.1 (MFSA 2026-29):
CVE-2026-5732: Incorrect boundary conditions, integer overflow in the
Graphics: Text component
CVE-2026-5731: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox
ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and
Thunderbird 149.0.2
CVE-2026-5734: Memory safety bugs fixed in Firefox ESR 140.9.1,
Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird
149.0.2
Checksums-Sha1:
15a4fa2b0cf20fb139ec65e0ad19c1c2b9615650 8435 thunderbird_140.9.1esr-1.dsc
84b87ca29bac62dce723d3ea8b2fe789bfd0da93 12258432 thunderbird_140.9.1esr.orig-thunderbird-l10n.tar.xz
802efd47d4d111ea0cb4d1c2c3de29a03ea595d9 790072504 thunderbird_140.9.1esr.orig.tar.xz
8a4d7ade4925aa39b7618716d1b4434fa198934e 554756 thunderbird_140.9.1esr-1.debian.tar.xz
dbd59d7f36c96900dd28ba452eab427bfbba4f11 8357 thunderbird_140.9.1esr-1_source.buildinfo
Checksums-Sha256:
c0c325f2df6c191cbd757ed8ae57c00789d28a0fb2a6d3d22da191b7c1145c1b 8435 thunderbird_140.9.1esr-1.dsc
cfc6529ef9d6d1773af2a47a8000a383f89c17471ad27f251a366d0626350c66 12258432 thunderbird_140.9.1esr.orig-thunderbird-l10n.tar.xz
dc55127d40c5a53a35250d1ecaf30651a52b88064c826e04f721b62d1f8fccea 790072504 thunderbird_140.9.1esr.orig.tar.xz
3edcb4edd6fb1ca3044f9cc2544caefa3772d095620f5b9d180efba00402b597 554756 thunderbird_140.9.1esr-1.debian.tar.xz
693b7e6d0b21476c3d71250f6f4b3c489ef913e579b91e873f9ce1816c02c043 8357 thunderbird_140.9.1esr-1_source.buildinfo
Files:
9e2c68dce0a60a387904c6f93e16239a 8435 mail optional thunderbird_140.9.1esr-1.dsc
7a517bf0483b0bfb2607c3f6b8f0c338 12258432 mail optional thunderbird_140.9.1esr.orig-thunderbird-l10n.tar.xz
5b90a10a6c37f9bd4c65dfd2d38161a0 790072504 mail optional thunderbird_140.9.1esr.orig.tar.xz
1aa1f79520346613a0c7a06cee3b693c 554756 mail optional thunderbird_140.9.1esr-1.debian.tar.xz
d80930137006fe63400c18d0890346aa 8357 mail optional thunderbird_140.9.1esr-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=2don
-----END PGP SIGNATURE-----
