-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 30 Sep 2026 21:02:12 -0400
Source: thunderbird
Architecture: source
Version: 1:140.17.0esr-1~deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Christoph Goehre <chris@sigxcpu.org>
Changes:
thunderbird (1:140.17.0esr-1~deb13u1) trixie-security; urgency=medium
.
* [59b44f0] New upstream version 140.17.0esr
Fixed CVE issues in upstream version 140.17 (MFSA 2026-102):
CVE-2026-103500: Heap buffer overflow opening large email
CVE-2026-100756: Incorrect boundary conditions in the Audio/Video:
Playback component
CVE-2026-100757: Use-after-free in the Widget component
CVE-2026-100758: Sandbox escape in the DOM: Navigation component
CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager
component
CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content
Processes component
CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the
Graphics component
CVE-2026-100766: Information disclosure in the Networking: JAR component
CVE-2026-100767: Use-after-free in the Networking: Cache component
CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component
CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content
Processes component
CVE-2026-100771: Undefined behavior in the DOM: Streams component
CVE-2026-100772: Use-after-free in the DOM: Core & HTML component
CVE-2026-100773: Use-after-free in the Storage: IndexedDB component
CVE-2026-100774: Use-after-free in the DOM: Core & HTML component
CVE-2026-100775: Sandbox escape in the Graphics component
CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component
CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component
CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core &
HTML component
CVE-2026-100779: Use-after-free in the XSLT component
CVE-2026-100780: Use-after-free in the DOM: Core & HTML component
CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in
the Graphics: WebRender component
CVE-2026-100782: Privilege escalation due to incorrect boundary conditions
in the Graphics component
CVE-2026-100783: Uninitialized memory in the Audio/Video component
CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component
CVE-2026-100785: Use-after-free in the DOM: Core & HTML component
CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics
component
CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component
CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component
CVE-2026-100790: Use-after-free in the XSLT component
CVE-2026-100791: Use-after-free in the DOM: Core & HTML component
CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component
CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly
component
CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in
the Internationalization component
CVE-2026-96869: Information disclosure in the Networking component
CVE-2026-100797: Privilege escalation due to use-after-free in the
Graphics: WebRender component
CVE-2026-100801: Privilege escalation in the DLL Services component
CVE-2026-100803: Same-origin policy bypass in the WebExtensions component
CVE-2026-100807: Privilege escalation in the DOM: Service Workers
component
CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core &
HTML component
CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk
component
CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in
the XPCOM component
CVE-2026-100820: Privilege escalation in the Address Bar component
CVE-2026-100821: Site isolation issue in the Panning and Zooming component
Checksums-Sha1:
83db2b5df74789706ba671cd8768dd7b302fc4a3 8496 thunderbird_140.17.0esr-1~deb13u1.dsc
2b50f8ef5ecb39848ff42464b22c14a1a043d727 12281336 thunderbird_140.17.0esr.orig-thunderbird-l10n.tar.xz
ee16589efd16073359ed153e309489a59fbd2b0c 784673056 thunderbird_140.17.0esr.orig.tar.xz
16e917d9ddb7cd41d3c89011570f9c0233f6dbc5 573136 thunderbird_140.17.0esr-1~deb13u1.debian.tar.xz
Checksums-Sha256:
9e0d6b63b273804c3f61bd2fa96739c9325834151adc3cfd8342e9826b00ffb9 8496 thunderbird_140.17.0esr-1~deb13u1.dsc
e936c6abde03ed062e0f0ce3f1ca61d444a535e25672d1263b64c97945a32fc9 12281336 thunderbird_140.17.0esr.orig-thunderbird-l10n.tar.xz
ea084fef8469fbc5848a7867e3b080a63d977b6ae26dd138ccde83dd9684b2cc 784673056 thunderbird_140.17.0esr.orig.tar.xz
ee44ab6af5ff7ce650cf08dc795a7e58595447bed344472d5450e9db4024e9dd 573136 thunderbird_140.17.0esr-1~deb13u1.debian.tar.xz
Files:
b803dc8bbab776851a4b8abbcc68d9de 8496 mail optional thunderbird_140.17.0esr-1~deb13u1.dsc
68242e0c408756d9156879ae93d81716 12281336 mail optional thunderbird_140.17.0esr.orig-thunderbird-l10n.tar.xz
b60829028c915e638cf270471857e500 784673056 mail optional thunderbird_140.17.0esr.orig.tar.xz
306e6a3c4f62a661470686ec8b0e0816 573136 mail optional thunderbird_140.17.0esr-1~deb13u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=H+eY
-----END PGP SIGNATURE-----
