-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 22 Oct 2026 18:48:29 +0200
Source: thunderbird
Architecture: source
Version: 1:153.5.1esr-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Changes:
thunderbird (1:153.5.1esr-1) unstable; urgency=medium
.
* [5646ea6] New upstream version 153.5.1esr
Fixed CVE issues in upstream version 153.5.1 (MFSA 2026-115):
CVE-2026-113866: Account password sent unencrypted during Exchange account
setup
CVE-2026-113867: Stanza injection in XMPP chat
CVE-2026-113868: Uninitialized memory disclosure and out-of-bounds read in
POP3 and SMTP NTLM authentication
CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-
lists, and other State component
Checksums-Sha1:
55c7a3c8bf4e54770f7f221513fbcc787ee42ea6 8411 thunderbird_153.5.1esr-1.dsc
d181e0d149b773b63d235342254f46afc9fc6251 12840724 thunderbird_153.5.1esr.orig-thunderbird-l10n.tar.xz
c3e41a3bb929e057ce1f87f6c9da68f7201e2ca1 905933452 thunderbird_153.5.1esr.orig.tar.xz
f3ced71d536313af15c6f7a3d51e61ece318c313 559216 thunderbird_153.5.1esr-1.debian.tar.xz
954e577234a13255476bc990be3a5dc608c8347f 40999 thunderbird_153.5.1esr-1_amd64.buildinfo
Checksums-Sha256:
1d6c1333a066277bf89917350158a5777ea31f603b1bf1b2abc5868b602543f8 8411 thunderbird_153.5.1esr-1.dsc
a12a0fa0bf04d552d5a8291201a9e4e090e1d336b2924d7b7a76919c06924214 12840724 thunderbird_153.5.1esr.orig-thunderbird-l10n.tar.xz
5765886292f0d83e3f45ff4effc57100b53bb56c1d90b1589555705e36a84baf 905933452 thunderbird_153.5.1esr.orig.tar.xz
e621db41a7cac05d7e80797d72550121ef05e011002af2fb70e5ab68e4989378 559216 thunderbird_153.5.1esr-1.debian.tar.xz
47be152b0ea6b700072945d6f3f3fdd9b3f2ceb9e74282005afe886ded2fb351 40999 thunderbird_153.5.1esr-1_amd64.buildinfo
Files:
bbc1bb331280e31efd3033be02865d3d 8411 mail optional thunderbird_153.5.1esr-1.dsc
a517f3483625574c8367e6451c0760f7 12840724 mail optional thunderbird_153.5.1esr.orig-thunderbird-l10n.tar.xz
79c9101d85e850185438bc442ebd85f3 905933452 mail optional thunderbird_153.5.1esr.orig.tar.xz
80e8d4bd6d5c242a68fce6cb65a4ab66 559216 mail optional thunderbird_153.5.1esr-1.debian.tar.xz
eabe9c84cc78fd5aa8e9a3a52e80a822 40999 mail optional thunderbird_153.5.1esr-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmraT48ACgkQgwFgFCUd
HbCbrhAAj+ewIU9afU6NjHmmqb4PM5AJkeBaaSqqDxX71h4okNueqsIeULkOKJi1
vJAn3CNbta8G516Ah9YFAY+kB2YUDvm2Pek/pbhCKn36C7M42AWj92BLjUx1+AQI
FamyYxlVevYLsmMDFnNYtI4dg1xrSpDdE3lRT420wl+2Ln4ekjnVo1wDj0fzf71X
RHESP2p6UJ5VgZbiicuiWi/bljIA0O4us1bbCnpJd4Q/Hfdizj1FXyNm1Dw/IThS
gjPde8LQEVKij4szsLAjqZtWtH7ZyUV845/lNu3zNlxlhTNKeR3PbZGhj2AFMVUg
DQfE1h7frksjpngYpcIrd8kSk+xsdqntAgKFGSA5IgAC6xvmRR1Qyp7O27/6q8va
icZcRsv2FRoLJxRH8EDDwXWUxW7ObxLZZRJgWA/3XclQCGET8q4cB6aw7RGsPUGD
BSwng+obIB35oYGcmRllneQDBnd5VETPfXlNdBwhxnDhkY/rsyM+lrBx17CGe/3Z
w7/GDtN96DBMVqer5bjd1KHY+/GgoHXzfMVZjHfHE4NTa6CxkyEtuCjgL+JNKxqk
1eKx70xLy3wPjbcc1vdCjpEXFVtOYMEHfhLAf3IjKJKwFsmBPCTfxHkVG/OL2KTg
BAoFDtEjQrYzZoZQdLhmGZj4BoDq/R4P5h/ZGgh19BYUwfkcCjk=
=eUDT
-----END PGP SIGNATURE-----
