-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 01 May 2026 10:33:23 +0200
Source: thunderbird
Architecture: source
Version: 1:140.10.1esr-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Christoph Goehre <chris@sigxcpu.org>
Changes:
thunderbird (1:140.10.1esr-1) unstable; urgency=medium
.
* [f774578] New upstream version 140.10.1esr
Fixed CVE issues in upstream version 140.10.1 (MFSA 2026-39):
CVE-2026-7320: Information disclosure due to incorrect boundary conditions
in the Audio/Video component
CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the
WebRTC: Networking component
CVE-2026-7322: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and
Thunderbird 150.0.1
CVE-2026-7323: Memory safety bugs fixed in Thunderbird ESR 140.10.1 and
Thunderbird 150.0.1
Checksums-Sha1:
4173dfa082871a93b30ff4c862355425bacb5966 8445 thunderbird_140.10.1esr-1.dsc
8af312cbf2fc2222cd7abbd3bec68164ce11f317 12278300 thunderbird_140.10.1esr.orig-thunderbird-l10n.tar.xz
e6a1ca5b2ed2d0fe23167a68c4adf22604f4c787 790557396 thunderbird_140.10.1esr.orig.tar.xz
2b2b7966ef2e56e5c088b439db3b21b844c01bd7 569224 thunderbird_140.10.1esr-1.debian.tar.xz
f6d6852b28becec983fe8b82e3f47be5d3350088 8150 thunderbird_140.10.1esr-1_source.buildinfo
Checksums-Sha256:
ac13efc7046690432329887c1ef1bc56c6018f187791385da38d6ab4d2f7920c 8445 thunderbird_140.10.1esr-1.dsc
0188a06aff0327ca6e4db56570a3da6e36f7eb77082efebe2458ed66af532c39 12278300 thunderbird_140.10.1esr.orig-thunderbird-l10n.tar.xz
4dfaebe92f7ea9f751dd4a1517e4d2e863d9e3e297f7efd2d6a9b6cf0feb6257 790557396 thunderbird_140.10.1esr.orig.tar.xz
f58da274e9cf8b0003920cc2ce833eac653c0654c8b70a1c50a5b9843147b9db 569224 thunderbird_140.10.1esr-1.debian.tar.xz
29ea07e93186f41bef59d3b920e47a0ead359165c140a6472983fb92645c287a 8150 thunderbird_140.10.1esr-1_source.buildinfo
Files:
bdf8576dd2bb77afdb1493efc7cae2d9 8445 mail optional thunderbird_140.10.1esr-1.dsc
86e0a60e09763e92124d664815c17284 12278300 mail optional thunderbird_140.10.1esr.orig-thunderbird-l10n.tar.xz
5d2d9a554253346696f3df07f376cd28 790557396 mail optional thunderbird_140.10.1esr.orig.tar.xz
46ca4f459a5f41cb76662917f807e4a2 569224 mail optional thunderbird_140.10.1esr-1.debian.tar.xz
be9f62425d79a9a43a950b1d0e3999ff 8150 mail optional thunderbird_140.10.1esr-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=7OOe
-----END PGP SIGNATURE-----
