Debian Package Tracker
Register | Log in
Subscribe

thunderbird

mail/news client with RSS, chat and integrated spam filter support

Choose email to subscribe with

general
  • source: thunderbird (main)
  • version: 1:153.5.1esr-1
  • maintainer: Carsten Schoenert (DMD)
  • uploaders: Christoph Goehre [DMD]
  • arch: all amd64 arm64 i386 loong64 mips64el ppc64 ppc64el riscv64 s390x
  • std-ver: 4.7.4
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 1:115.12.0-1~deb11u1
  • o-o-sec: 1:140.14.0esr-1~deb11u1
  • o-o-p-u: 1:115.14.0-1~deb11u1
  • oldstable: 1:140.12.0esr-1~deb12u1
  • old-sec: 1:153.5.1esr-1~deb12u1
  • old-p-u: 1:140.12.0esr-1~deb12u1
  • stable: 1:140.12.0esr-1~deb13u1
  • stable-sec: 1:153.5.1esr-1~deb13u2
  • stable-p-u: 1:140.17.0esr-1~deb13u1
  • testing: 1:153.5.0esr-1
  • unstable: 1:153.5.1esr-1
  • exp: 1:157.0-1
versioned links
  • 1:91.13.0-1~deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:115.12.0-1~deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:115.14.0-1~deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:115.16.0esr-1~deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:140.12.0esr-1~deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:140.12.0esr-1~deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:140.14.0esr-1~deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:140.17.0esr-1~deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:140.17.0esr-1~deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:153.1.0esr-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:153.5.0esr-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:153.5.1esr-1~deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:153.5.1esr-1~deb13u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:153.5.1esr-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1:157.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • thunderbird (136 bugs: 0, 120, 16, 0)
  • thunderbird-l10n-af
  • thunderbird-l10n-all
  • thunderbird-l10n-ar
  • thunderbird-l10n-ast
  • thunderbird-l10n-be
  • thunderbird-l10n-bg
  • thunderbird-l10n-br
  • thunderbird-l10n-ca
  • thunderbird-l10n-cak
  • thunderbird-l10n-cs
  • thunderbird-l10n-cy
  • thunderbird-l10n-da (1 bugs: 0, 0, 1, 0)
  • thunderbird-l10n-de
  • thunderbird-l10n-dsb
  • thunderbird-l10n-el
  • thunderbird-l10n-en-ca
  • thunderbird-l10n-en-gb
  • thunderbird-l10n-es-ar
  • thunderbird-l10n-es-es
  • thunderbird-l10n-es-mx
  • thunderbird-l10n-et
  • thunderbird-l10n-eu
  • thunderbird-l10n-fi
  • thunderbird-l10n-fr (2 bugs: 0, 1, 1, 0)
  • thunderbird-l10n-fy-nl
  • thunderbird-l10n-ga-ie
  • thunderbird-l10n-gd
  • thunderbird-l10n-gl
  • thunderbird-l10n-he
  • thunderbird-l10n-hr
  • thunderbird-l10n-hsb
  • thunderbird-l10n-hu
  • thunderbird-l10n-hy-am
  • thunderbird-l10n-id
  • thunderbird-l10n-is
  • thunderbird-l10n-it
  • thunderbird-l10n-ja
  • thunderbird-l10n-ka
  • thunderbird-l10n-kab
  • thunderbird-l10n-kk
  • thunderbird-l10n-ko
  • thunderbird-l10n-lt
  • thunderbird-l10n-lv
  • thunderbird-l10n-ms
  • thunderbird-l10n-nb-no
  • thunderbird-l10n-nl (1 bugs: 0, 1, 0, 0)
  • thunderbird-l10n-nn-no
  • thunderbird-l10n-pa-in
  • thunderbird-l10n-pl
  • thunderbird-l10n-pt-br
  • thunderbird-l10n-pt-pt
  • thunderbird-l10n-rm
  • thunderbird-l10n-ro
  • thunderbird-l10n-ru
  • thunderbird-l10n-sk
  • thunderbird-l10n-sl
  • thunderbird-l10n-sq
  • thunderbird-l10n-sr
  • thunderbird-l10n-sv-se
  • thunderbird-l10n-th
  • thunderbird-l10n-tr
  • thunderbird-l10n-uk
  • thunderbird-l10n-uz
  • thunderbird-l10n-vi
  • thunderbird-l10n-zh-cn
  • thunderbird-l10n-zh-tw
action needed
155 security issues in forky high

There are 155 open security issues in forky.

155 important issues:
  • CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2.
  • CVE-2026-113866: When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user's password. This vulnerability was fixed in Thunderbird 158.0.1 and Thunderbird 153.5.1.
  • CVE-2026-113867: Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in automatic replies, a remote XMPP user could send a crafted request that caused Thunderbird to inject arbitrary stanzas into the user's connection, which the server would then process as if sent by the user. This could be used to send messages or change contact and subscription settings on behalf of the user, without any interaction. This bug only affects Thunderbird's chat feature with XMPP accounts. This vulnerability was fixed in Thunderbird 158.0.1 and Thunderbird 153.5.1.
  • CVE-2026-113868: When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A challenge consisting only of base64 padding also caused an out-of-bounds read, crashing Thunderbird. This affected accounts configured to use NTLM or GSSAPI authentication. The uninitialized memory disclosure only affected NTLM. This vulnerability was fixed in Thunderbird 158.0.1 and Thunderbird 153.5.1.
  • CVE-2026-117860:
  • CVE-2026-117861:
  • CVE-2026-117862:
  • CVE-2026-117863:
  • CVE-2026-117864:
  • CVE-2026-117865:
  • CVE-2026-117866:
  • CVE-2026-117867:
  • CVE-2026-117868:
  • CVE-2026-117869:
  • CVE-2026-117870:
  • CVE-2026-117871:
  • CVE-2026-117872:
  • CVE-2026-117873:
  • CVE-2026-117874:
  • CVE-2026-117875:
  • CVE-2026-117876:
  • CVE-2026-117877:
  • CVE-2026-117878:
  • CVE-2026-117879:
  • CVE-2026-117880:
  • CVE-2026-117881:
  • CVE-2026-117882:
  • CVE-2026-117883:
  • CVE-2026-117884:
  • CVE-2026-117885:
  • CVE-2026-117886:
  • CVE-2026-117887:
  • CVE-2026-117888:
  • CVE-2026-117889:
  • CVE-2026-117890:
  • CVE-2026-117891:
  • CVE-2026-117892:
  • CVE-2026-117893:
  • CVE-2026-117894:
  • CVE-2026-117895:
  • CVE-2026-117896:
  • CVE-2026-117897:
  • CVE-2026-117898:
  • CVE-2026-117899:
  • CVE-2026-117900:
  • CVE-2026-117901:
  • CVE-2026-117902:
  • CVE-2026-117903:
  • CVE-2026-117904:
  • CVE-2026-117905:
  • CVE-2026-117906:
  • CVE-2026-117907:
  • CVE-2026-117908:
  • CVE-2026-117909:
  • CVE-2026-117910:
  • CVE-2026-117911:
  • CVE-2026-117912:
  • CVE-2026-117913:
  • CVE-2026-117914:
  • CVE-2026-117915:
  • CVE-2026-117916:
  • CVE-2026-117917:
  • CVE-2026-117918:
  • CVE-2026-117919:
  • CVE-2026-117920:
  • CVE-2026-117921:
  • CVE-2026-117922:
  • CVE-2026-117923:
  • CVE-2026-117924:
  • CVE-2026-117925:
  • CVE-2026-117926:
  • CVE-2026-117927:
  • CVE-2026-117928:
  • CVE-2026-117929:
  • CVE-2026-117930:
  • CVE-2026-117931:
  • CVE-2026-117932:
  • CVE-2026-117933:
  • CVE-2026-117934:
  • CVE-2026-117935:
  • CVE-2026-117936:
  • CVE-2026-117937:
  • CVE-2026-117938:
  • CVE-2026-117939:
  • CVE-2026-117940:
  • CVE-2026-117941:
  • CVE-2026-117942:
  • CVE-2026-117943:
  • CVE-2026-117944:
  • CVE-2026-117945:
  • CVE-2026-117946:
  • CVE-2026-117947:
  • CVE-2026-117948:
  • CVE-2026-117949:
  • CVE-2026-117950:
  • CVE-2026-117951:
  • CVE-2026-117952:
  • CVE-2026-117953:
  • CVE-2026-117954:
  • CVE-2026-117955:
  • CVE-2026-117956:
  • CVE-2026-117957:
  • CVE-2026-117958:
  • CVE-2026-117959:
  • CVE-2026-117960:
  • CVE-2026-117961:
  • CVE-2026-117962:
  • CVE-2026-117963:
  • CVE-2026-117964:
  • CVE-2026-117965:
  • CVE-2026-117966:
  • CVE-2026-117967:
  • CVE-2026-117968:
  • CVE-2026-117969:
  • CVE-2026-117970:
  • CVE-2026-117971:
  • CVE-2026-117972:
  • CVE-2026-117973:
  • CVE-2026-117974:
  • CVE-2026-117975:
  • CVE-2026-117976:
  • CVE-2026-117977:
  • CVE-2026-117978:
  • CVE-2026-117979:
  • CVE-2026-117980:
  • CVE-2026-117981:
  • CVE-2026-117982:
  • CVE-2026-117983:
  • CVE-2026-117984:
  • CVE-2026-117985:
  • CVE-2026-117986:
  • CVE-2026-117987:
  • CVE-2026-117988:
  • CVE-2026-117989:
  • CVE-2026-117990:
  • CVE-2026-117991:
  • CVE-2026-117992:
  • CVE-2026-117993:
  • CVE-2026-117994:
  • CVE-2026-117995:
  • CVE-2026-117996:
  • CVE-2026-117997:
  • CVE-2026-117998:
  • CVE-2026-117999:
  • CVE-2026-118000:
  • CVE-2026-118002:
  • CVE-2026-118003:
  • CVE-2026-118004:
  • CVE-2026-118174:
  • CVE-2026-118175:
  • CVE-2026-118176:
  • CVE-2026-118177:
  • CVE-2026-118178:
  • CVE-2026-118179:
  • CVE-2026-118180:
Created: 2026-10-22 Last update: 2026-10-28 00:30
151 security issues in trixie high

There are 151 open security issues in trixie.

151 important issues:
  • CVE-2026-117860:
  • CVE-2026-117861:
  • CVE-2026-117862:
  • CVE-2026-117863:
  • CVE-2026-117864:
  • CVE-2026-117865:
  • CVE-2026-117866:
  • CVE-2026-117867:
  • CVE-2026-117868:
  • CVE-2026-117869:
  • CVE-2026-117870:
  • CVE-2026-117871:
  • CVE-2026-117872:
  • CVE-2026-117873:
  • CVE-2026-117874:
  • CVE-2026-117875:
  • CVE-2026-117876:
  • CVE-2026-117877:
  • CVE-2026-117878:
  • CVE-2026-117879:
  • CVE-2026-117880:
  • CVE-2026-117881:
  • CVE-2026-117882:
  • CVE-2026-117883:
  • CVE-2026-117884:
  • CVE-2026-117885:
  • CVE-2026-117886:
  • CVE-2026-117887:
  • CVE-2026-117888:
  • CVE-2026-117889:
  • CVE-2026-117890:
  • CVE-2026-117891:
  • CVE-2026-117892:
  • CVE-2026-117893:
  • CVE-2026-117894:
  • CVE-2026-117895:
  • CVE-2026-117896:
  • CVE-2026-117897:
  • CVE-2026-117898:
  • CVE-2026-117899:
  • CVE-2026-117900:
  • CVE-2026-117901:
  • CVE-2026-117902:
  • CVE-2026-117903:
  • CVE-2026-117904:
  • CVE-2026-117905:
  • CVE-2026-117906:
  • CVE-2026-117907:
  • CVE-2026-117908:
  • CVE-2026-117909:
  • CVE-2026-117910:
  • CVE-2026-117911:
  • CVE-2026-117912:
  • CVE-2026-117913:
  • CVE-2026-117914:
  • CVE-2026-117915:
  • CVE-2026-117916:
  • CVE-2026-117917:
  • CVE-2026-117918:
  • CVE-2026-117919:
  • CVE-2026-117920:
  • CVE-2026-117921:
  • CVE-2026-117922:
  • CVE-2026-117923:
  • CVE-2026-117924:
  • CVE-2026-117925:
  • CVE-2026-117926:
  • CVE-2026-117927:
  • CVE-2026-117928:
  • CVE-2026-117929:
  • CVE-2026-117930:
  • CVE-2026-117931:
  • CVE-2026-117932:
  • CVE-2026-117933:
  • CVE-2026-117934:
  • CVE-2026-117935:
  • CVE-2026-117936:
  • CVE-2026-117937:
  • CVE-2026-117938:
  • CVE-2026-117939:
  • CVE-2026-117940:
  • CVE-2026-117941:
  • CVE-2026-117942:
  • CVE-2026-117943:
  • CVE-2026-117944:
  • CVE-2026-117945:
  • CVE-2026-117946:
  • CVE-2026-117947:
  • CVE-2026-117948:
  • CVE-2026-117949:
  • CVE-2026-117950:
  • CVE-2026-117951:
  • CVE-2026-117952:
  • CVE-2026-117953:
  • CVE-2026-117954:
  • CVE-2026-117955:
  • CVE-2026-117956:
  • CVE-2026-117957:
  • CVE-2026-117958:
  • CVE-2026-117959:
  • CVE-2026-117960:
  • CVE-2026-117961:
  • CVE-2026-117962:
  • CVE-2026-117963:
  • CVE-2026-117964:
  • CVE-2026-117965:
  • CVE-2026-117966:
  • CVE-2026-117967:
  • CVE-2026-117968:
  • CVE-2026-117969:
  • CVE-2026-117970:
  • CVE-2026-117971:
  • CVE-2026-117972:
  • CVE-2026-117973:
  • CVE-2026-117974:
  • CVE-2026-117975:
  • CVE-2026-117976:
  • CVE-2026-117977:
  • CVE-2026-117978:
  • CVE-2026-117979:
  • CVE-2026-117980:
  • CVE-2026-117981:
  • CVE-2026-117982:
  • CVE-2026-117983:
  • CVE-2026-117984:
  • CVE-2026-117985:
  • CVE-2026-117986:
  • CVE-2026-117987:
  • CVE-2026-117988:
  • CVE-2026-117989:
  • CVE-2026-117990:
  • CVE-2026-117991:
  • CVE-2026-117992:
  • CVE-2026-117993:
  • CVE-2026-117994:
  • CVE-2026-117995:
  • CVE-2026-117996:
  • CVE-2026-117997:
  • CVE-2026-117998:
  • CVE-2026-117999:
  • CVE-2026-118000:
  • CVE-2026-118002:
  • CVE-2026-118003:
  • CVE-2026-118004:
  • CVE-2026-118174:
  • CVE-2026-118175:
  • CVE-2026-118176:
  • CVE-2026-118177:
  • CVE-2026-118178:
  • CVE-2026-118179:
  • CVE-2026-118180:
Created: 2026-10-28 Last update: 2026-10-28 00:30
151 security issues in sid high

There are 151 open security issues in sid.

151 important issues:
  • CVE-2026-117860:
  • CVE-2026-117861:
  • CVE-2026-117862:
  • CVE-2026-117863:
  • CVE-2026-117864:
  • CVE-2026-117865:
  • CVE-2026-117866:
  • CVE-2026-117867:
  • CVE-2026-117868:
  • CVE-2026-117869:
  • CVE-2026-117870:
  • CVE-2026-117871:
  • CVE-2026-117872:
  • CVE-2026-117873:
  • CVE-2026-117874:
  • CVE-2026-117875:
  • CVE-2026-117876:
  • CVE-2026-117877:
  • CVE-2026-117878:
  • CVE-2026-117879:
  • CVE-2026-117880:
  • CVE-2026-117881:
  • CVE-2026-117882:
  • CVE-2026-117883:
  • CVE-2026-117884:
  • CVE-2026-117885:
  • CVE-2026-117886:
  • CVE-2026-117887:
  • CVE-2026-117888:
  • CVE-2026-117889:
  • CVE-2026-117890:
  • CVE-2026-117891:
  • CVE-2026-117892:
  • CVE-2026-117893:
  • CVE-2026-117894:
  • CVE-2026-117895:
  • CVE-2026-117896:
  • CVE-2026-117897:
  • CVE-2026-117898:
  • CVE-2026-117899:
  • CVE-2026-117900:
  • CVE-2026-117901:
  • CVE-2026-117902:
  • CVE-2026-117903:
  • CVE-2026-117904:
  • CVE-2026-117905:
  • CVE-2026-117906:
  • CVE-2026-117907:
  • CVE-2026-117908:
  • CVE-2026-117909:
  • CVE-2026-117910:
  • CVE-2026-117911:
  • CVE-2026-117912:
  • CVE-2026-117913:
  • CVE-2026-117914:
  • CVE-2026-117915:
  • CVE-2026-117916:
  • CVE-2026-117917:
  • CVE-2026-117918:
  • CVE-2026-117919:
  • CVE-2026-117920:
  • CVE-2026-117921:
  • CVE-2026-117922:
  • CVE-2026-117923:
  • CVE-2026-117924:
  • CVE-2026-117925:
  • CVE-2026-117926:
  • CVE-2026-117927:
  • CVE-2026-117928:
  • CVE-2026-117929:
  • CVE-2026-117930:
  • CVE-2026-117931:
  • CVE-2026-117932:
  • CVE-2026-117933:
  • CVE-2026-117934:
  • CVE-2026-117935:
  • CVE-2026-117936:
  • CVE-2026-117937:
  • CVE-2026-117938:
  • CVE-2026-117939:
  • CVE-2026-117940:
  • CVE-2026-117941:
  • CVE-2026-117942:
  • CVE-2026-117943:
  • CVE-2026-117944:
  • CVE-2026-117945:
  • CVE-2026-117946:
  • CVE-2026-117947:
  • CVE-2026-117948:
  • CVE-2026-117949:
  • CVE-2026-117950:
  • CVE-2026-117951:
  • CVE-2026-117952:
  • CVE-2026-117953:
  • CVE-2026-117954:
  • CVE-2026-117955:
  • CVE-2026-117956:
  • CVE-2026-117957:
  • CVE-2026-117958:
  • CVE-2026-117959:
  • CVE-2026-117960:
  • CVE-2026-117961:
  • CVE-2026-117962:
  • CVE-2026-117963:
  • CVE-2026-117964:
  • CVE-2026-117965:
  • CVE-2026-117966:
  • CVE-2026-117967:
  • CVE-2026-117968:
  • CVE-2026-117969:
  • CVE-2026-117970:
  • CVE-2026-117971:
  • CVE-2026-117972:
  • CVE-2026-117973:
  • CVE-2026-117974:
  • CVE-2026-117975:
  • CVE-2026-117976:
  • CVE-2026-117977:
  • CVE-2026-117978:
  • CVE-2026-117979:
  • CVE-2026-117980:
  • CVE-2026-117981:
  • CVE-2026-117982:
  • CVE-2026-117983:
  • CVE-2026-117984:
  • CVE-2026-117985:
  • CVE-2026-117986:
  • CVE-2026-117987:
  • CVE-2026-117988:
  • CVE-2026-117989:
  • CVE-2026-117990:
  • CVE-2026-117991:
  • CVE-2026-117992:
  • CVE-2026-117993:
  • CVE-2026-117994:
  • CVE-2026-117995:
  • CVE-2026-117996:
  • CVE-2026-117997:
  • CVE-2026-117998:
  • CVE-2026-117999:
  • CVE-2026-118000:
  • CVE-2026-118002:
  • CVE-2026-118003:
  • CVE-2026-118004:
  • CVE-2026-118174:
  • CVE-2026-118175:
  • CVE-2026-118176:
  • CVE-2026-118177:
  • CVE-2026-118178:
  • CVE-2026-118179:
  • CVE-2026-118180:
Created: 2026-10-28 Last update: 2026-10-28 00:30
151 security issues in bookworm high

There are 151 open security issues in bookworm.

151 important issues:
  • CVE-2026-117860:
  • CVE-2026-117861:
  • CVE-2026-117862:
  • CVE-2026-117863:
  • CVE-2026-117864:
  • CVE-2026-117865:
  • CVE-2026-117866:
  • CVE-2026-117867:
  • CVE-2026-117868:
  • CVE-2026-117869:
  • CVE-2026-117870:
  • CVE-2026-117871:
  • CVE-2026-117872:
  • CVE-2026-117873:
  • CVE-2026-117874:
  • CVE-2026-117875:
  • CVE-2026-117876:
  • CVE-2026-117877:
  • CVE-2026-117878:
  • CVE-2026-117879:
  • CVE-2026-117880:
  • CVE-2026-117881:
  • CVE-2026-117882:
  • CVE-2026-117883:
  • CVE-2026-117884:
  • CVE-2026-117885:
  • CVE-2026-117886:
  • CVE-2026-117887:
  • CVE-2026-117888:
  • CVE-2026-117889:
  • CVE-2026-117890:
  • CVE-2026-117891:
  • CVE-2026-117892:
  • CVE-2026-117893:
  • CVE-2026-117894:
  • CVE-2026-117895:
  • CVE-2026-117896:
  • CVE-2026-117897:
  • CVE-2026-117898:
  • CVE-2026-117899:
  • CVE-2026-117900:
  • CVE-2026-117901:
  • CVE-2026-117902:
  • CVE-2026-117903:
  • CVE-2026-117904:
  • CVE-2026-117905:
  • CVE-2026-117906:
  • CVE-2026-117907:
  • CVE-2026-117908:
  • CVE-2026-117909:
  • CVE-2026-117910:
  • CVE-2026-117911:
  • CVE-2026-117912:
  • CVE-2026-117913:
  • CVE-2026-117914:
  • CVE-2026-117915:
  • CVE-2026-117916:
  • CVE-2026-117917:
  • CVE-2026-117918:
  • CVE-2026-117919:
  • CVE-2026-117920:
  • CVE-2026-117921:
  • CVE-2026-117922:
  • CVE-2026-117923:
  • CVE-2026-117924:
  • CVE-2026-117925:
  • CVE-2026-117926:
  • CVE-2026-117927:
  • CVE-2026-117928:
  • CVE-2026-117929:
  • CVE-2026-117930:
  • CVE-2026-117931:
  • CVE-2026-117932:
  • CVE-2026-117933:
  • CVE-2026-117934:
  • CVE-2026-117935:
  • CVE-2026-117936:
  • CVE-2026-117937:
  • CVE-2026-117938:
  • CVE-2026-117939:
  • CVE-2026-117940:
  • CVE-2026-117941:
  • CVE-2026-117942:
  • CVE-2026-117943:
  • CVE-2026-117944:
  • CVE-2026-117945:
  • CVE-2026-117946:
  • CVE-2026-117947:
  • CVE-2026-117948:
  • CVE-2026-117949:
  • CVE-2026-117950:
  • CVE-2026-117951:
  • CVE-2026-117952:
  • CVE-2026-117953:
  • CVE-2026-117954:
  • CVE-2026-117955:
  • CVE-2026-117956:
  • CVE-2026-117957:
  • CVE-2026-117958:
  • CVE-2026-117959:
  • CVE-2026-117960:
  • CVE-2026-117961:
  • CVE-2026-117962:
  • CVE-2026-117963:
  • CVE-2026-117964:
  • CVE-2026-117965:
  • CVE-2026-117966:
  • CVE-2026-117967:
  • CVE-2026-117968:
  • CVE-2026-117969:
  • CVE-2026-117970:
  • CVE-2026-117971:
  • CVE-2026-117972:
  • CVE-2026-117973:
  • CVE-2026-117974:
  • CVE-2026-117975:
  • CVE-2026-117976:
  • CVE-2026-117977:
  • CVE-2026-117978:
  • CVE-2026-117979:
  • CVE-2026-117980:
  • CVE-2026-117981:
  • CVE-2026-117982:
  • CVE-2026-117983:
  • CVE-2026-117984:
  • CVE-2026-117985:
  • CVE-2026-117986:
  • CVE-2026-117987:
  • CVE-2026-117988:
  • CVE-2026-117989:
  • CVE-2026-117990:
  • CVE-2026-117991:
  • CVE-2026-117992:
  • CVE-2026-117993:
  • CVE-2026-117994:
  • CVE-2026-117995:
  • CVE-2026-117996:
  • CVE-2026-117997:
  • CVE-2026-117998:
  • CVE-2026-117999:
  • CVE-2026-118000:
  • CVE-2026-118002:
  • CVE-2026-118003:
  • CVE-2026-118004:
  • CVE-2026-118174:
  • CVE-2026-118175:
  • CVE-2026-118176:
  • CVE-2026-118177:
  • CVE-2026-118178:
  • CVE-2026-118179:
  • CVE-2026-118180:
Created: 2026-10-28 Last update: 2026-10-28 00:30
lintian reports 2 errors and 2 warnings high
Lintian reports 2 errors and 2 warnings about this package. You should make the package lintian clean getting rid of them.
Created: 2026-10-16 Last update: 2026-10-23 08:30
3 bugs tagged patch in the BTS normal
The BTS contains patches fixing 3 bugs, consider including or untagging them.
Created: 2026-09-02 Last update: 2026-10-28 00:01
Fails to build during reproducibility testing normal
A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!
Created: 2026-10-08 Last update: 2026-10-27 22:33
Depends on packages which need a new maintainer normal
The packages that thunderbird depends on which need a new maintainer are:
  • hunspell-kk (#879871)
    • Recommends: hunspell-kk
  • ifrench-gut (#1006643)
    • Recommends: myspell-fr-gut
  • uzbek-wordlist (#841696)
    • Recommends: hunspell-uz
Created: 2019-11-22 Last update: 2026-10-27 22:32
3 open merge requests in Salsa normal
There are 3 open merge requests for this package on Salsa. You should consider reviewing and/or merging these merge requests.
Created: 2026-09-30 Last update: 2026-09-30 18:31
AppStream hints: 1 warning normal
AppStream found metadata issues for packages:
  • thunderbird: 1 warning
You should get rid of them to provide more metadata about this software.
Created: 2021-12-22 Last update: 2021-12-22 06:06
debian/patches: 16 patches to forward upstream low

Among the 20 debian patches available in version 1:153.5.1esr-1 of the package, we noticed the following issues:

  • 16 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.
Created: 2023-02-26 Last update: 2026-10-23 08:32
testing migrations
  • excuses:
    • Migration status for thunderbird (1:153.5.0esr-1 to 1:153.5.1esr-1): BLOCKED: Maybe temporary, maybe blocked but Britney is missing information (check below)
    • Issues preventing migration:
    • ∙ ∙ Missing build on riscv64
    • ∙ ∙ Autopkgtest deferred on riscv64: missing arch:riscv64 build
    • ∙ ∙ Autopkgtest for thunderbird/1:153.5.1esr-1: amd64: Pass, arm64: Test triggered (failure will be ignored), i386: Pass, ppc64el: No tests, superficial or marked flaky ♻, s390x: No tests, superficial or marked flaky ♻ (reference ♻)
    • ∙ ∙ Lintian check waiting for test results on riscv64 - info
    • Additional info (not blocking):
    • ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/t/thunderbird.html
    • ∙ ∙ Autopkgtest skipped on armhf: not installable (which is allowed)
    • ∙ ∙ Reproduced on amd64 - info
    • ∙ ∙ Reproduced on arm64 - info
    • ∙ ∙ Reproduced on armhf - info
    • ∙ ∙ Reproduced on i386 - info
    • ∙ ∙ 5 days old (needed 5 days)
    • Not considered
news
[rss feed]
  • [2026-10-27] Accepted thunderbird 1:153.6.0esr-1 (source) into unstable (Christoph Goehre)
  • [2026-10-27] Accepted thunderbird 1:153.5.1esr-1~deb13u2 (source) into stable-security (Debian FTP Masters) (signed by: Carsten Schoenert)
  • [2026-10-26] Accepted thunderbird 1:153.5.1esr-1~deb12u1 (source) into oldstable-security (Carsten Schoenert)
  • [2026-10-25] Accepted thunderbird 1:153.5.1esr-1~deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Carsten Schoenert)
  • [2026-10-22] Accepted thunderbird 1:153.5.1esr-1 (source) into unstable (Carsten Schoenert)
  • [2026-10-21] thunderbird 1:153.5.0esr-1 MIGRATED to testing (Debian testing watch)
  • [2026-10-17] Accepted thunderbird 1:140.17.0esr-1~deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Christoph Goehre)
  • [2026-10-15] Accepted thunderbird 1:153.5.0esr-1 (source) into unstable (Carsten Schoenert)
  • [2026-10-07] thunderbird 1:153.4.0esr-1 MIGRATED to testing (Debian testing watch)
  • [2026-10-05] Accepted thunderbird 1:157.0-1 (source) into experimental (Carsten Schoenert)
  • [2026-10-01] Accepted thunderbird 1:140.17.0esr-1~deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Christoph Goehre)
  • [2026-10-01] Accepted thunderbird 1:153.4.0esr-1 (source) into unstable (Carsten Schoenert)
  • [2026-10-01] Accepted thunderbird 1:140.17.0esr-1~deb12u1 (source) into oldstable-security (Christoph Goehre)
  • [2026-09-24] Accepted thunderbird 1:153.3.0esr-2 (source) into unstable (Christoph Goehre)
  • [2026-09-21] Accepted thunderbird 1:140.16.0esr-1~deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Christoph Goehre)
  • [2026-09-19] Accepted thunderbird 1:155.0.1-2 (source) into experimental (Christoph Goehre)
  • [2026-09-17] Accepted thunderbird 1:153.3.0esr-1 (source) into unstable (Carsten Schoenert)
  • [2026-09-16] Accepted thunderbird 1:140.16.0esr-1~deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Christoph Goehre)
  • [2026-09-16] Accepted thunderbird 1:140.16.0esr-1~deb12u1 (source) into oldstable-security (Christoph Goehre)
  • [2026-09-14] Accepted thunderbird 1:155.0.1-1 (source) into experimental (Carsten Schoenert)
  • [2026-09-05] Accepted thunderbird 1:140.15.0esr-1~deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Christoph Goehre)
  • [2026-09-04] Accepted thunderbird 1:140.15.0esr-1~deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Christoph Goehre)
  • [2026-09-02] Accepted thunderbird 1:153.2.0esr-1 (source) into unstable (Carsten Schoenert)
  • [2026-09-02] Accepted thunderbird 1:140.15.0esr-1~deb12u1 (source) into oldstable-security (Christoph Goehre)
  • [2026-08-26] thunderbird 1:140.14.0esr-1 MIGRATED to testing (Debian testing watch)
  • [2026-08-24] Accepted thunderbird 1:140.14.0esr-1~deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Carsten Schoenert)
  • [2026-08-24] Accepted thunderbird 1:140.14.0esr-1~deb11u1 (source) into oldoldstable-security (Carsten Schoenert)
  • [2026-08-23] Accepted thunderbird 1:140.14.0esr-1~deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Carsten Schoenert)
  • [2026-08-23] Accepted thunderbird 1:140.14.0esr-1~deb12u1 (source) into oldstable-security (Carsten Schoenert)
  • [2026-08-20] Accepted thunderbird 1:140.14.0esr-1 (source) into unstable (Carsten Schoenert)
  • 1
  • 2
bugs [bug history graph]
  • all: 345 350
  • RC: 0
  • I&N: 269 273
  • M&W: 76 77
  • F&P: 0
  • patch: 3
links
  • homepage
  • lintian (2, 2)
  • buildd: logs, exp, reproducibility, cross
  • popcon
  • browse source code
  • other distros
  • security tracker
  • screenshots
  • l10n (-, 73)
  • debian patches
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 2:1snap1-0ubuntu5
  • 404 bugs (4 patches)
  • patches for 2:1snap1-0ubuntu5

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing