-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 31 Oct 2026 06:50:30 +0200
Source: thunderbird
Architecture: source
Version: 1:159.0-1
Distribution: experimental
Urgency: medium
Maintainer: Carsten Schoenert <c.schoenert@t-online.de>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Changes:
thunderbird (1:159.0-1) experimental; urgency=medium
.
* [36df804] New upstream version 159.0
Fixed CVE issues in upstream version 159 (MFSA 2026-121):
CVE-2026-118174: Displaying a message could load an attacker-chosen URL
through an OpenPGP key attachment
CVE-2026-118175: Content of other messages could be included when replying
to a crafted message
CVE-2026-118176: Bypass of remote UNC path restriction in mailbox: URLs
CVE-2026-118177: Calendar discovery accepted local file and remote network
share locations
CVE-2026-118178: RSS feed could redirect its subscription to a local file
or network share
CVE-2026-118179: Request forgery via news: links
CVE-2026-118180: Matrix homeserver could redirect the chat session to a
local file or network share
CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation
component
CVE-2026-117861: Sandbox escape in the DOM: Navigation component
CVE-2026-117862: Privilege escalation due to incorrect boundary conditions
in the Networking component
CVE-2026-117863: Information disclosure due to uninitialized memory in the
Audio/Video component
CVE-2026-117864: Sandbox escape in the Form Manager component
CVE-2026-117865: Use-after-free in the JavaScript: GC component
CVE-2026-117866: Privilege escalation due to use-after-free in the
Graphics: Canvas2D component
CVE-2026-117867: Use-after-free in the Layout component
CVE-2026-117868: Sandbox escape in the DOM: Networking component
CVE-2026-117869: Use-after-free in the DOM: Core & HTML component
CVE-2026-117870: Use-after-free in the JavaScript Engine component
CVE-2026-117871: Invalid pointer in the Graphics component
CVE-2026-117872: Use-after-free in the JavaScript: Standard Library
component
CVE-2026-117873: Incorrect boundary conditions in the Audio/Video:
Playback component
CVE-2026-118005: Use-after-free in the WebRTC: Signaling component
CVE-2026-117874: Use-after-free in the Internationalization component
CVE-2026-117875: Use-after-free in the Layout: Scrolling and Overflow
component
CVE-2026-117876: Use-after-free in the Layout: Text and Fonts component
CVE-2026-118006: Privilege escalation due to use-after-free in the WebRTC:
Signaling component
CVE-2026-117877: Use-after-free in the Layout: Text and Fonts component
CVE-2026-118007: Use-after-free in the JavaScript: GC component
CVE-2026-117878: Other issue, use-after-free in the Storage: IndexedDB
component
CVE-2026-117879: Incorrect boundary conditions in the Layout: Tables
component
CVE-2026-118008: Privilege escalation in the DOM: Navigation component
CVE-2026-117880: Use-after-free in the XML component
CVE-2026-118009: Integer overflow, use-after-free in the Graphics: Text
component
CVE-2026-117881: Use-after-free in the DOM: Core & HTML component
CVE-2026-117882: Use-after-free in the Layout component
CVE-2026-117883: Use-after-free in the DOM: HTML Parser component
CVE-2026-117884: Use-after-free in the Networking component
CVE-2026-117885: Use-after-free in the Layout: Grid component
CVE-2026-117886: Incorrect boundary conditions in the Graphics: Text
component
CVE-2026-117887: Use-after-free in the DOM: Core & HTML component
CVE-2026-118010: Use-after-free in the Disability Access APIs component
CVE-2026-117888: Uninitialized memory in the Graphics: Canvas2D component
CVE-2026-117889: Incorrect boundary conditions in the JavaScript Engine
component
CVE-2026-117890: JIT miscompilation in the JavaScript Engine: JIT
component
CVE-2026-117891: Use-after-free in the JavaScript Engine: JIT component
CVE-2026-117892: Privilege escalation due to use-after-free in the WebRTC:
Networking component
CVE-2026-117893: Incorrect boundary conditions in the Security: PSM
component
CVE-2026-117894: Incorrect boundary conditions in the WebRTC: Signaling
component
CVE-2026-117895: Use-after-free in the DOM: Core & HTML component
CVE-2026-117896: Use-after-free in the DOM: Core & HTML component
CVE-2026-117897: Incorrect boundary conditions in the Layout: Tables
component
CVE-2026-117898: Use-after-free in the JavaScript Engine: JIT component
CVE-2026-117899: Use-after-free in the Networking: HTTP component
CVE-2026-117900: Use-after-free in the DOM: Editor component
CVE-2026-117901: Use-after-free in the DOM: Core & HTML component
CVE-2026-117902: Use-after-free in the Layout: Text and Fonts component
CVE-2026-117903: Use-after-free in the Audio/Video component
CVE-2026-117904: Use-after-free in the JavaScript: GC component
CVE-2026-117905: Use-after-free in the Audio/Video: Playback component
CVE-2026-117906: Use-after-free in the CSS Parsing and Computation
component
CVE-2026-117907: Use-after-free in the Networking component
CVE-2026-117908: Use-after-free in the Graphics: ImageLib component
CVE-2026-117909: Use-after-free in the JavaScript: GC component
CVE-2026-117910: Invalid pointer in the JavaScript Engine component
CVE-2026-117911: Use-after-free in the Audio/Video: Playback component
CVE-2026-117912: Same-origin policy bypass in the CSS Parsing and
Computation component
CVE-2026-117913: Use-after-free in the SVG component
CVE-2026-117914: Use-after-free in the SVG component
CVE-2026-117915: Incorrect boundary conditions in the Layout: Block and
Inline component
CVE-2026-117916: Use-after-free in the XSLT component
CVE-2026-117917: Invalid pointer in the Graphics: WebRender component
CVE-2026-117918: Use-after-free in the Graphics: Canvas2D component
CVE-2026-117919: Use-after-free in the DOM: Core & HTML component
CVE-2026-117920: Use-after-free in the DOM: HTML Parser component
CVE-2026-117921: Use-after-free in the CSS Parsing and Computation
component
CVE-2026-117922: Use-after-free in the Networking: WebSockets component
CVE-2026-117923: Use-after-free in the Audio/Video component
CVE-2026-117924: Use-after-free in the XSLT component
CVE-2026-117925: Use-after-free in the DOM: Core & HTML component
CVE-2026-117926: Incorrect boundary conditions in the SVG component
CVE-2026-117927: Use-after-free in the SVG component
CVE-2026-117928: Same-origin policy bypass in the CSS Parsing and
Computation component
CVE-2026-117929: Use-after-free in the DOM: Core & HTML component
CVE-2026-117930: Use-after-free in the DOM: Bindings (WebIDL) component
CVE-2026-117931: Use-after-free in the DOM: Events component
CVE-2026-117932: Use-after-free in the DOM: Core & HTML component
CVE-2026-117933: Frame poisoning in the CSS Parsing and Computation
component
CVE-2026-117934: Use-after-free in the Layout component
CVE-2026-118011: Frame poisoning in the CSS Parsing and Computation
component
CVE-2026-118012: Use-after-free in the DOM: Animation component
CVE-2026-117935: Use-after-free in the DOM: Bindings (WebIDL) component
CVE-2026-117936: Use-after-free in the DOM: Core & HTML component
CVE-2026-117937: Invalid pointer in the JavaScript Engine component
CVE-2026-117938: Use-after-free in the Layout component
CVE-2026-117939: Use-after-free in the XML component
CVE-2026-117940: Use-after-free in the DOM: Core & HTML component
CVE-2026-118013: Use-after-free in the Layout: Images, Video, and HTML
Frames component
CVE-2026-117941: Use-after-free in the DOM: CSS Object Model component
CVE-2026-117942: Incorrect boundary conditions in the JavaScript Engine:
JIT component
CVE-2026-118014: Use-after-free in the JavaScript Engine: JIT component
CVE-2026-117943: Use-after-free in the DOM: Core & HTML component
CVE-2026-117944: Use-after-free in the Layout component
CVE-2026-118015: Use-after-free in the DOM: Core & HTML component
CVE-2026-117945: Incorrect boundary conditions in the XML component
CVE-2026-118016: Use-after-free in the DOM: Core & HTML component
CVE-2026-117946: Incorrect boundary conditions in the JavaScript Engine
component
CVE-2026-117947: Use-after-free in the XML component
CVE-2026-117948: Use-after-free in the SVG component
CVE-2026-117949: Use-after-free in the DOM: Core & HTML component
CVE-2026-117950: Incorrect boundary conditions in the DOM: Core & HTML
component
CVE-2026-117951: Use-after-free in the DOM: Core & HTML component
CVE-2026-117952: Uninitialized memory in the Networking component
CVE-2026-117953: Use-after-free in the DOM: Core & HTML component
CVE-2026-118017: Use-after-free in the SVG component
CVE-2026-117954: Use-after-free in the Layout: Positioned component
CVE-2026-118019: Race condition, use-after-free in the DOM: File component
CVE-2026-117955: JIT miscompilation in the JavaScript: WebAssembly
component
CVE-2026-100801: Privilege escalation in the DLL Services component
CVE-2026-117956: Invalid pointer in the Nimbus Desktop Client component
CVE-2026-117957: Cryptographic issue in the WebRTC: Networking component
CVE-2026-117958: Site isolation issue in the Networking: HTTP component
CVE-2026-117959: Site isolation issue in the DOM: Service Workers
component
CVE-2026-117960: Spoofing issue in the DOM: Core & HTML component
CVE-2026-117961: Incorrect boundary conditions in the Layout: Text and
Fonts component
CVE-2026-117962: Sandbox escape due to incorrect boundary conditions in
the Storage: Quota Manager component
CVE-2026-117963: Incorrect boundary conditions in the DOM: Service Workers
component
CVE-2026-117964: Use-after-free in the Panning and Zooming component
CVE-2026-117965: Same-origin policy bypass in the Address Bar component
CVE-2026-117966: Site isolation issue in the Networking: HTTP component
CVE-2026-117967: Mitigation bypass in the DOM: Security component
CVE-2026-118020: Use-after-free in the Layout component
CVE-2026-117968: Use-after-free in the DOM: Core & HTML component
CVE-2026-117969: Invalid pointer in the JavaScript Engine: JIT component
CVE-2026-117970: Race condition in the Disability Access APIs component
CVE-2026-117971: Sandbox escape due to use-after-free in the Print Preview
component
CVE-2026-117972: Use-after-free in the Graphics component
CVE-2026-118021: Sandbox escape due to use-after-free in the XPCOM
component
CVE-2026-117973: Use-after-free in the Networking: DNS component
CVE-2026-117974: Use-after-free in the XML component
CVE-2026-117975: Sandbox escape due to invalid pointer in the Graphics:
WebRender component
CVE-2026-117976: Site isolation issue in the DOM: Navigation component
CVE-2026-117977: Other issue in the Console component
CVE-2026-117978: Incorrect boundary conditions in the Graphics component
CVE-2026-117979: Incorrect boundary conditions in the Graphics: WebRender
component
CVE-2026-117980: Use-after-free in the Graphics component
CVE-2026-117981: Privilege escalation in the Toolkit component
CVE-2026-117982: Invalid pointer in the JavaScript Engine: JIT component
CVE-2026-117983: Use-after-free in the Graphics component
CVE-2026-118022: Sandbox escape due to use-after-free in the Disability
Access APIs component
CVE-2026-117984: Incorrect boundary conditions in the Layout: Scrolling
and Overflow component
CVE-2026-117985: Sandbox escape due to use-after-free in the Graphics
component
CVE-2026-117986: Use-after-free in the Graphics component
CVE-2026-117987: Use-after-free in the Graphics component
CVE-2026-117988: Sandbox escape due to incorrect boundary conditions in
the Graphics: CanvasWebGL component
CVE-2026-117989: Use-after-free in the Graphics component
CVE-2026-118023: Sandbox escape due to use-after-free in the Graphics:
WebRender component
CVE-2026-117990: Sandbox escape due to incorrect boundary conditions in
the Graphics: WebRender component
CVE-2026-117991: Incorrect boundary conditions in the Layout: Text and
Fonts component
CVE-2026-117992: Information disclosure in the CSS Parsing and Computation
component
CVE-2026-117993: Integer overflow in the Graphics: Text component
CVE-2026-117994: Use-after-free in the JavaScript: GC component
CVE-2026-117995: Privilege escalation in the DOM: UI Events & Focus
Handling component
CVE-2026-117996: Incorrect boundary conditions in the WebRTC component
CVE-2026-117997: Sandbox escape due to use-after-free in the Widget
component
CVE-2026-118024: Use-after-free in the Graphics: Text component
CVE-2026-118025: Other issue in the SVG component
CVE-2026-117998: Mitigation bypass in the DOM: Push Subscriptions
component
CVE-2026-117999: Race condition in the IPC component
CVE-2026-118000: Information disclosure in the Networking: HTTP component
CVE-2026-118002: Information disclosure due to race condition in the
Networking component
CVE-2026-118003: Information disclosure in the Networking: DNS component
CVE-2026-118026: Invalid pointer in the JavaScript: GC component
CVE-2026-118004: Incorrect boundary conditions in the CSS Transitions and
Animations component
* [faee53c] Rebuild patch queue from patch-queue branch
Adjusted patches:
debian-hacks/Allow-to-override-rust-LTO-flag.patch
thunderbird-l10n/sl-change-Edit-Uredi-to-CTRL-E.patch
.
[ Jeremy Bícha ]
* [70b48ed] Remove obsolete Build-Depends: libidl-dev
Checksums-Sha1:
122579754b3219e8f66628c44bf3dfc82d5b5bee 8379 thunderbird_159.0-1.dsc
9e424a74133a8404a58d127bbd5be3449b7f4735 12689820 thunderbird_159.0.orig-thunderbird-l10n.tar.xz
47ae00cb91919f6eec74b9a44866872f5a51d4e0 925269276 thunderbird_159.0.orig.tar.xz
5247f27a722ea0a802887df74ba74be629c0ac0d 541700 thunderbird_159.0-1.debian.tar.xz
9b25009dfc645f1fb4bc626c1168842106543b1c 40145 thunderbird_159.0-1_amd64.buildinfo
Checksums-Sha256:
be079bb1ea6d0a7f1996d8e4bc005fc4825346e67d576486c7c2112f724b9330 8379 thunderbird_159.0-1.dsc
78958772d0fa4ed0ae35a608a99ee1b7d7b266f46d4f2a512fe23c6c9eb0ad1f 12689820 thunderbird_159.0.orig-thunderbird-l10n.tar.xz
1c9bff50937293db9aa51dff5c0668e33b398fdbcd5b7a72fc0a749fe04b23c3 925269276 thunderbird_159.0.orig.tar.xz
b2411e5979d5acd8c2e2ae7d34cd850cd256bc75d13664c020063350301e414f 541700 thunderbird_159.0-1.debian.tar.xz
04ac9dd7902e821120ac3cbf38c0fd78f4866c581652f93a4b8606ca732284c4 40145 thunderbird_159.0-1_amd64.buildinfo
Files:
f3840ce0b3b2566ced91abe85142fb34 8379 mail optional thunderbird_159.0-1.dsc
3f399679b9a43d67c476041377d37a82 12689820 mail optional thunderbird_159.0.orig-thunderbird-l10n.tar.xz
813358f8cec14363881f2dd0ae2a585e 925269276 mail optional thunderbird_159.0.orig.tar.xz
487b4e486eff019b2e452bcc7769a664 541700 mail optional thunderbird_159.0-1.debian.tar.xz
82f112fd412f7fc6fe34082a594319e4 40145 mail optional thunderbird_159.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=mkDF
-----END PGP SIGNATURE-----
