-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 27 Oct 2026 17:38:54 -0400
Source: thunderbird
Architecture: source
Version: 1:153.6.0esr-1
Distribution: unstable
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Christoph Goehre <chris@sigxcpu.org>
Changes:
thunderbird (1:153.6.0esr-1) unstable; urgency=medium
.
* [0b54f88] New upstream version 153.6.0esr
Fixed CVE issues in upstream version 153.6 (MFSA 2026-122):
CVE-2026-118174: Displaying a message could load an attacker-chosen URL
through an OpenPGP key attachment
CVE-2026-118175: Content of other messages could be included when replying
to a crafted message
CVE-2026-118176: Bypass of remote UNC path restriction in mailbox: URLs
CVE-2026-118177: Calendar discovery accepted local file and remote network
share locations
CVE-2026-118178: RSS feed could redirect its subscription to a local file
or network share
CVE-2026-118179: Request forgery via news: links
CVE-2026-118180: Matrix homeserver could redirect the chat session to a
local file or network share
CVE-2026-110247: Integer overflow in libmime buffer growth could lead to
heap corruption
CVE-2026-113869: Use-after-free in S/MIME decryption during a security
device password prompt
CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation
component
CVE-2026-117861: Sandbox escape in the DOM: Navigation component
CVE-2026-117862: Privilege escalation due to incorrect boundary conditions
in the Networking component
CVE-2026-117863: Information disclosure due to uninitialized memory in the
Audio/Video component
CVE-2026-117864: Sandbox escape in the Form Manager component
CVE-2026-117865: Use-after-free in the JavaScript: GC component
CVE-2026-117866: Privilege escalation due to use-after-free in the
Graphics: Canvas2D component
CVE-2026-117867: Use-after-free in the Layout component
CVE-2026-117868: Sandbox escape in the DOM: Networking component
CVE-2026-117869: Use-after-free in the DOM: Core & HTML component
CVE-2026-117870: Use-after-free in the JavaScript Engine component
CVE-2026-117871: Invalid pointer in the Graphics component
CVE-2026-117872: Use-after-free in the JavaScript: Standard Library
component
CVE-2026-117873: Incorrect boundary conditions in the Audio/Video:
Playback component
CVE-2026-117874: Use-after-free in the Internationalization component
CVE-2026-117875: Use-after-free in the Layout: Scrolling and Overflow
component
CVE-2026-117876: Use-after-free in the Layout: Text and Fonts component
CVE-2026-117877: Use-after-free in the Layout: Text and Fonts component
CVE-2026-117878: Other issue, use-after-free in the Storage: IndexedDB
component
CVE-2026-117879: Incorrect boundary conditions in the Layout: Tables
component
CVE-2026-117880: Use-after-free in the XML component
CVE-2026-117881: Use-after-free in the DOM: Core & HTML component
CVE-2026-117882: Use-after-free in the Layout component
CVE-2026-117883: Use-after-free in the DOM: HTML Parser component
CVE-2026-117884: Use-after-free in the Networking component
CVE-2026-117885: Use-after-free in the Layout: Grid component
CVE-2026-117886: Incorrect boundary conditions in the Graphics: Text
component
CVE-2026-117887: Use-after-free in the DOM: Core & HTML component
CVE-2026-117888: Uninitialized memory in the Graphics: Canvas2D component
CVE-2026-117889: Incorrect boundary conditions in the JavaScript Engine
component
CVE-2026-117890: JIT miscompilation in the JavaScript Engine: JIT
component
CVE-2026-117891: Use-after-free in the JavaScript Engine: JIT component
CVE-2026-117892: Privilege escalation due to use-after-free in the WebRTC:
Networking component
CVE-2026-117893: Incorrect boundary conditions in the Security: PSM
component
CVE-2026-117894: Incorrect boundary conditions in the WebRTC: Signaling
component
CVE-2026-117895: Use-after-free in the DOM: Core & HTML component
CVE-2026-117896: Use-after-free in the DOM: Core & HTML component
CVE-2026-117897: Incorrect boundary conditions in the Layout: Tables
component
CVE-2026-117898: Use-after-free in the JavaScript Engine: JIT component
CVE-2026-117899: Use-after-free in the Networking: HTTP component
CVE-2026-117900: Use-after-free in the DOM: Editor component
CVE-2026-117901: Use-after-free in the DOM: Core & HTML component
CVE-2026-117902: Use-after-free in the Layout: Text and Fonts component
CVE-2026-117903: Use-after-free in the Audio/Video component
CVE-2026-117904: Use-after-free in the JavaScript: GC component
CVE-2026-117905: Use-after-free in the Audio/Video: Playback component
CVE-2026-117906: Use-after-free in the CSS Parsing and Computation
component
CVE-2026-117907: Use-after-free in the Networking component
CVE-2026-117908: Use-after-free in the Graphics: ImageLib component
CVE-2026-117909: Use-after-free in the JavaScript: GC component
CVE-2026-117910: Invalid pointer in the JavaScript Engine component
CVE-2026-117911: Use-after-free in the Audio/Video: Playback component
CVE-2026-117912: Same-origin policy bypass in the CSS Parsing and
Computation component
CVE-2026-117913: Use-after-free in the SVG component
CVE-2026-117914: Use-after-free in the SVG component
CVE-2026-117915: Incorrect boundary conditions in the Layout: Block and
Inline component
CVE-2026-117916: Use-after-free in the XSLT component
CVE-2026-117917: Invalid pointer in the Graphics: WebRender component
CVE-2026-117918: Use-after-free in the Graphics: Canvas2D component
CVE-2026-117919: Use-after-free in the DOM: Core & HTML component
CVE-2026-117920: Use-after-free in the DOM: HTML Parser component
CVE-2026-117921: Use-after-free in the CSS Parsing and Computation
component
CVE-2026-117922: Use-after-free in the Networking: WebSockets component
CVE-2026-117923: Use-after-free in the Audio/Video component
CVE-2026-117924: Use-after-free in the XSLT component
CVE-2026-117925: Use-after-free in the DOM: Core & HTML component
CVE-2026-117926: Incorrect boundary conditions in the SVG component
CVE-2026-117927: Use-after-free in the SVG component
CVE-2026-117928: Same-origin policy bypass in the CSS Parsing and
Computation component
CVE-2026-117929: Use-after-free in the DOM: Core & HTML component
CVE-2026-117930: Use-after-free in the DOM: Bindings (WebIDL) component
CVE-2026-117931: Use-after-free in the DOM: Events component
CVE-2026-117932: Use-after-free in the DOM: Core & HTML component
CVE-2026-117933: Frame poisoning in the CSS Parsing and Computation
component
CVE-2026-117934: Use-after-free in the Layout component
CVE-2026-117935: Use-after-free in the DOM: Bindings (WebIDL) component
CVE-2026-117936: Use-after-free in the DOM: Core & HTML component
CVE-2026-117937: Invalid pointer in the JavaScript Engine component
CVE-2026-117938: Use-after-free in the Layout component
CVE-2026-117939: Use-after-free in the XML component
CVE-2026-117940: Use-after-free in the DOM: Core & HTML component
CVE-2026-117941: Use-after-free in the DOM: CSS Object Model component
CVE-2026-117942: Incorrect boundary conditions in the JavaScript Engine:
JIT component
CVE-2026-117943: Use-after-free in the DOM: Core & HTML component
CVE-2026-117944: Use-after-free in the Layout component
CVE-2026-117945: Incorrect boundary conditions in the XML component
CVE-2026-117946: Incorrect boundary conditions in the JavaScript Engine
component
CVE-2026-117947: Use-after-free in the XML component
CVE-2026-117948: Use-after-free in the SVG component
CVE-2026-117949: Use-after-free in the DOM: Core & HTML component
CVE-2026-117950: Incorrect boundary conditions in the DOM: Core & HTML
component
CVE-2026-117951: Use-after-free in the DOM: Core & HTML component
CVE-2026-117952: Uninitialized memory in the Networking component
CVE-2026-117953: Use-after-free in the DOM: Core & HTML component
CVE-2026-117954: Use-after-free in the Layout: Positioned component
CVE-2026-117955: JIT miscompilation in the JavaScript: WebAssembly
component
CVE-2026-100801: Privilege escalation in the DLL Services component
CVE-2026-117956: Invalid pointer in the Nimbus Desktop Client component
CVE-2026-117957: Cryptographic issue in the WebRTC: Networking component
CVE-2026-117958: Site isolation issue in the Networking: HTTP component
CVE-2026-117959: Site isolation issue in the DOM: Service Workers
component
CVE-2026-117960: Spoofing issue in the DOM: Core & HTML component
CVE-2026-117961: Incorrect boundary conditions in the Layout: Text and
Fonts component
CVE-2026-117962: Sandbox escape due to incorrect boundary conditions in
the Storage: Quota Manager component
CVE-2026-117963: Incorrect boundary conditions in the DOM: Service Workers
component
CVE-2026-117964: Use-after-free in the Panning and Zooming component
CVE-2026-117965: Same-origin policy bypass in the Address Bar component
CVE-2026-117966: Site isolation issue in the Networking: HTTP component
CVE-2026-117967: Mitigation bypass in the DOM: Security component
CVE-2026-117968: Use-after-free in the DOM: Core & HTML component
CVE-2026-117969: Invalid pointer in the JavaScript Engine: JIT component
CVE-2026-117970: Race condition in the Disability Access APIs component
CVE-2026-117971: Sandbox escape due to use-after-free in the Print Preview
component
CVE-2026-117972: Use-after-free in the Graphics component
CVE-2026-117973: Use-after-free in the Networking: DNS component
CVE-2026-117974: Use-after-free in the XML component
CVE-2026-117975: Sandbox escape due to invalid pointer in the Graphics:
WebRender component
CVE-2026-117976: Site isolation issue in the DOM: Navigation component
CVE-2026-117977: Other issue in the Console component
CVE-2026-117978: Incorrect boundary conditions in the Graphics component
CVE-2026-117979: Incorrect boundary conditions in the Graphics: WebRender
component
CVE-2026-117980: Use-after-free in the Graphics component
CVE-2026-117981: Privilege escalation in the Toolkit component
CVE-2026-117982: Invalid pointer in the JavaScript Engine: JIT component
CVE-2026-117983: Use-after-free in the Graphics component
CVE-2026-117984: Incorrect boundary conditions in the Layout: Scrolling
and Overflow component
CVE-2026-117985: Sandbox escape due to use-after-free in the Graphics
component
CVE-2026-117986: Use-after-free in the Graphics component
CVE-2026-117987: Use-after-free in the Graphics component
CVE-2026-117988: Sandbox escape due to incorrect boundary conditions in
the Graphics: CanvasWebGL component
CVE-2026-117989: Use-after-free in the Graphics component
CVE-2026-117990: Sandbox escape due to incorrect boundary conditions in
the Graphics: WebRender component
CVE-2026-117991: Incorrect boundary conditions in the Layout: Text and
Fonts component
CVE-2026-117992: Information disclosure in the CSS Parsing and Computation
component
CVE-2026-117993: Integer overflow in the Graphics: Text component
CVE-2026-117994: Use-after-free in the JavaScript: GC component
CVE-2026-117995: Privilege escalation in the DOM: UI Events & Focus
Handling component
CVE-2026-117996: Incorrect boundary conditions in the WebRTC component
CVE-2026-117997: Sandbox escape due to use-after-free in the Widget
component
CVE-2026-117998: Mitigation bypass in the DOM: Push Subscriptions
component
CVE-2026-117999: Race condition in the IPC component
CVE-2026-118000: Information disclosure in the Networking: HTTP component
CVE-2026-118002: Information disclosure due to race condition in the
Networking component
CVE-2026-118003: Information disclosure in the Networking: DNS component
CVE-2026-118004: Incorrect boundary conditions in the CSS Transitions and
Animations component
Checksums-Sha1:
a366ddbd3a36f2e9dc89a992451dbfa9cc0e3642 8411 thunderbird_153.6.0esr-1.dsc
1f85444ba3b9820a3d743ff2a997d5fe806e13b3 12858468 thunderbird_153.6.0esr.orig-thunderbird-l10n.tar.xz
c822bb4817cb70c6db651f29758f3b5115ea258f 906829364 thunderbird_153.6.0esr.orig.tar.xz
f3fad6b9bb239868586f1fd813e684e81fce84c1 560152 thunderbird_153.6.0esr-1.debian.tar.xz
ead148d5ba6186522d4f753f6e83b96c7d823a20 8419 thunderbird_153.6.0esr-1_source.buildinfo
Checksums-Sha256:
12c254615bdd14268c7a74415f5df873d67394bd47f1f2603c44f419fd1c297f 8411 thunderbird_153.6.0esr-1.dsc
3b72f207cfebd76c9086fe4b92969fff62251d99deab13ee1782df2d11a5ae66 12858468 thunderbird_153.6.0esr.orig-thunderbird-l10n.tar.xz
bed026b720d041b0527736f003af9160602ac0f633987b8c7deeebb8381f24fd 906829364 thunderbird_153.6.0esr.orig.tar.xz
09d158ce268fd85821a3ce1ac752d0439924cf9ed936b431febd5c64d52d93b0 560152 thunderbird_153.6.0esr-1.debian.tar.xz
d74336386eaea89d1a2d8ae945c668aa4ddacb8e66366d3fbccf8d9ab63848c6 8419 thunderbird_153.6.0esr-1_source.buildinfo
Files:
e010482032049f6b1cef52856a04ad18 8411 mail optional thunderbird_153.6.0esr-1.dsc
74d248c171c6bfcdc2e3b4311a189b26 12858468 mail optional thunderbird_153.6.0esr.orig-thunderbird-l10n.tar.xz
1e4dc8b41f15a10f804f136f0cd6940a 906829364 mail optional thunderbird_153.6.0esr.orig.tar.xz
c9552943eeb8cf12a74a15c560a8f015 560152 mail optional thunderbird_153.6.0esr-1.debian.tar.xz
8046de01940a202b01b83acce9d9c575 8419 mail optional thunderbird_153.6.0esr-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=GHKS
-----END PGP SIGNATURE-----
