-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 30 Sep 2026 19:34:10 +0200
Source: thunderbird
Architecture: source
Version: 1:153.4.0esr-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Changes:
thunderbird (1:153.4.0esr-1) unstable; urgency=medium
.
[ Carsten Schoenert ]
* [92194de] d/read-cve-data.py: Add helper to collect CVE data
* [57c63ad] New upstream version 153.4.0esr
Fixed CVE issues in upstream version 153.4 (MFSA 2026-103):
CVE-2026-103500: Heap buffer overflow opening large email
CVE-2026-100756: Incorrect boundary conditions in the Audio/Video:
Playback component
CVE-2026-100757: Use-after-free in the Widget component
CVE-2026-100758: Sandbox escape in the DOM: Navigation component
CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager
component
CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing
component
CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content
Processes component
CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component
CVE-2026-100766: Information disclosure in the Networking: JAR component
CVE-2026-100767: Use-after-free in the Networking: Cache component
CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component
CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content
Processes component
CVE-2026-100771: Undefined behavior in the DOM: Streams component
CVE-2026-100772: Use-after-free in the DOM: Core & HTML component
CVE-2026-100773: Use-after-free in the Storage: IndexedDB component
CVE-2026-100774: Use-after-free in the DOM: Core & HTML component
CVE-2026-100775: Sandbox escape in the Graphics component
CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component
CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component
CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core &
HTML component
CVE-2026-100779: Use-after-free in the XSLT component
CVE-2026-100780: Use-after-free in the DOM: Core & HTML component
CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in
the Graphics: WebRender component
CVE-2026-100782: Privilege escalation due to incorrect boundary conditions
in the Graphics component
CVE-2026-100783: Uninitialized memory in the Audio/Video component
CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component
CVE-2026-100785: Use-after-free in the DOM: Core & HTML component
CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics
component
CVE-2026-100787: Sandbox escape in the XUL component
CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component
CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component
CVE-2026-100790: Use-after-free in the XSLT component
CVE-2026-100791: Use-after-free in the DOM: Core & HTML component
CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component
CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly
component
CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in
the Internationalization component
CVE-2026-96869: Information disclosure in the Networking component
CVE-2026-100797: Privilege escalation due to use-after-free in the
Graphics: WebRender component
CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component
CVE-2026-100800: Sandbox escape due to use-after-free in the Disability
Access APIs component
CVE-2026-100801: Privilege escalation in the DLL Services component
CVE-2026-100803: Same-origin policy bypass in the WebExtensions component
CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component
CVE-2026-100807: Privilege escalation in the DOM: Service Workers
component
CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component
CVE-2026-100809: Same-origin policy bypass in the DevTools component
CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core &
HTML component
CVE-2026-100812: Denial-of-service in the Graphics component
CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine:
JIT component
CVE-2026-100815: Use-after-free in the CSS Parsing and Computation
component
CVE-2026-100816: Site isolation issue in the DOM: Networking component
CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk
component
CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in
the XPCOM component
CVE-2026-100820: Privilege escalation in the Address Bar component
CVE-2026-100821: Site isolation issue in the Panning and Zooming component
CVE-2026-100822: Spoofing issue in the Networking: HTTP component
CVE-2026-100824: Privilege escalation in the Places component
CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component
CVE-2026-100826: Denial-of-service in the Storage: StorageManager
component
CVE-2026-100828: Mitigation bypass in the Bookmarks & History component
CVE-2026-100829: Mitigation bypass in the DOM: Security component
CVE-2026-100830: Mitigation bypass in the DOM: Navigation component
CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling
component
* [9f1571a] d/read-cve-data.py: Increase subsequent_indent by one space
.
[ Christoph Goehre ]
* [b8e656c] d/read-cve-data.py: replace %< with 8< to simulate a better
looking scissors
Checksums-Sha1:
63f8ba5c701af585d2cb6b806650a09e5e46196e 8467 thunderbird_153.4.0esr-1.dsc
cb52409bf30b7b791fd6def0ba2e7edb23cbd6ec 12838636 thunderbird_153.4.0esr.orig-thunderbird-l10n.tar.xz
225c00dba8911e9e9e5e71b9c0c2eef608b3c64e 904383428 thunderbird_153.4.0esr.orig.tar.xz
e20911d509976d91e67e47391f31799dc9996fd1 558404 thunderbird_153.4.0esr-1.debian.tar.xz
66110b7a43c5b3a381757689fcfe192ed9d69d41 40986 thunderbird_153.4.0esr-1_amd64.buildinfo
Checksums-Sha256:
d1e4fadc137e6dbcf7d5fd37c7eefecbd52e7f403474d290ec9da2d4f6ae94e7 8467 thunderbird_153.4.0esr-1.dsc
33d3e4d5261c53ae3f6812ff4f9f870816e6ba03a7ec703aa2029fee49291783 12838636 thunderbird_153.4.0esr.orig-thunderbird-l10n.tar.xz
87dd8a46f459d295787ae986b25e538f49ed7695d40ec1799241a60963a42014 904383428 thunderbird_153.4.0esr.orig.tar.xz
ec41d23f2dac87a65a3f6ba1ed400e3659f7a18942307f360632b6e60ea3ffbd 558404 thunderbird_153.4.0esr-1.debian.tar.xz
ad8cd3e70a9604e8100214b73b8966a149fb91967bda4b9ec8d589ba8ece9323 40986 thunderbird_153.4.0esr-1_amd64.buildinfo
Files:
e4913a9b11ed23c3955672a99e170d9a 8467 mail optional thunderbird_153.4.0esr-1.dsc
b383d4c70ac3bcd5077f60572f904c83 12838636 mail optional thunderbird_153.4.0esr.orig-thunderbird-l10n.tar.xz
7dccbf55fd79f2b9ada1222651967a08 904383428 mail optional thunderbird_153.4.0esr.orig.tar.xz
7fb6c7ec24058e056bc2d3975b976174 558404 mail optional thunderbird_153.4.0esr-1.debian.tar.xz
eefc48a53f8fdd7045ab6de3009f9130 40986 mail optional thunderbird_153.4.0esr-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=g15E
-----END PGP SIGNATURE-----
