-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 21:02:12 -0400 Source: thunderbird Binary: thunderbird thunderbird-dbgsym Architecture: ppc64el Version: 1:140.17.0esr-1~deb13u1 Distribution: trixie-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Christoph Goehre Description: thunderbird - mail/news client with RSS, chat and integrated spam filter suppor Changes: thunderbird (1:140.17.0esr-1~deb13u1) trixie-security; urgency=medium . * [59b44f0] New upstream version 140.17.0esr Fixed CVE issues in upstream version 140.17 (MFSA 2026-102): CVE-2026-103500: Heap buffer overflow opening large email CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component CVE-2026-100757: Use-after-free in the Widget component CVE-2026-100758: Sandbox escape in the DOM: Navigation component CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-100766: Information disclosure in the Networking: JAR component CVE-2026-100767: Use-after-free in the Networking: Cache component CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component CVE-2026-100771: Undefined behavior in the DOM: Streams component CVE-2026-100772: Use-after-free in the DOM: Core & HTML component CVE-2026-100773: Use-after-free in the Storage: IndexedDB component CVE-2026-100774: Use-after-free in the DOM: Core & HTML component CVE-2026-100775: Sandbox escape in the Graphics component CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component CVE-2026-100779: Use-after-free in the XSLT component CVE-2026-100780: Use-after-free in the DOM: Core & HTML component CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component CVE-2026-100783: Uninitialized memory in the Audio/Video component CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component CVE-2026-100785: Use-after-free in the DOM: Core & HTML component CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component CVE-2026-100790: Use-after-free in the XSLT component CVE-2026-100791: Use-after-free in the DOM: Core & HTML component CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component CVE-2026-96869: Information disclosure in the Networking component CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component CVE-2026-100801: Privilege escalation in the DLL Services component CVE-2026-100803: Same-origin policy bypass in the WebExtensions component CVE-2026-100807: Privilege escalation in the DOM: Service Workers component CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component CVE-2026-100820: Privilege escalation in the Address Bar component CVE-2026-100821: Site isolation issue in the Panning and Zooming component Checksums-Sha1: dd200f9b0fcfc184dc1fcd00901f4578ee458420 491706196 thunderbird-dbgsym_140.17.0esr-1~deb13u1_ppc64el.deb c6623dd13e0e27c1d65de99db2cd09efc927c70f 21409 thunderbird_140.17.0esr-1~deb13u1_ppc64el-buildd.buildinfo bf6fa56ab099ec259ddf76ef7e15cdc4c10671e5 65111496 thunderbird_140.17.0esr-1~deb13u1_ppc64el.deb Checksums-Sha256: e514053dd9f2906a2bddf4ab37bf97714632f922410a8a53bf9a48704f6d51e3 491706196 thunderbird-dbgsym_140.17.0esr-1~deb13u1_ppc64el.deb 595b825cacc2a7c6c045e54e673e6b5188793853ceb92e3def6d2209236bde50 21409 thunderbird_140.17.0esr-1~deb13u1_ppc64el-buildd.buildinfo 2dc4a57eefc08a8e7a6e209c7799d239a9dfe6911785574081f2625cc9e9eaa0 65111496 thunderbird_140.17.0esr-1~deb13u1_ppc64el.deb Files: 55b81d9460b57da9b689739277f53a74 491706196 debug optional thunderbird-dbgsym_140.17.0esr-1~deb13u1_ppc64el.deb b0f6cc23b1b2b6cac51db2f3c2d45c4a 21409 mail optional thunderbird_140.17.0esr-1~deb13u1_ppc64el-buildd.buildinfo c00caafdae040bad05e4cee18210e6da 65111496 mail optional thunderbird_140.17.0esr-1~deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE9ibmwdV9gdKNbK7oV8ucRsMTpuMFAmq92wEACgkQV8ucRsMT puOEGhAAp29OEu+UK4Hbze1eeUSATyM4DpXrGrY5QpvASN4X6HKCDPf/kVKe6YZl 1GnU8E0GxehazcQ1TAwk59m0ougq9nEQsCRCO1BEGH4Oj8S+56qt4w34pxqJHJoD BpallZlmAJFKo7UhV5HgNDSrKeQ3FBMbNPjcSrXp/AyORicbz416w4ZUM6mtpGF3 A4bJ108+A3c1geRH2OhfjUxEk+juzYSX0r2CpZKKK+G4TtN90PxTZRFJlzRSvPBG aJ7jnwHfyg8xMOz5cL4pbN2UeZtz2dvk/FisJ/nhSb7NlYkcNJebjAf0zsEFb4/i hAfkA3c9JDh6iJvpcB04Ge2wqOhEB+hII/6qd3pfEpBNXPu2BhP8mStYDE3Y3L7e /RKIiob1B2vuGEIGLF8iWO6rtwq//AX4DWaH3LMtKJRqY4iE4IycJqsdAHeLEwcW TvkhEZMSLhR4zwnJ/bAogNFlsdomdBU225aYeSVvzN5/r5KcFfzhNBYtLGp5oL44 RQRzKWn4W5/NG7yhMKXpji599wi8mDoBZNGrjySIA3N3ZG7Oz9Dziex0v+YU+YZM 7PRePnyC6XLD3CIjZL1K2jkkNiIGFOHezhN5ExtZiN910Z4PpguerOrwSVu6WXJm WRcpt6q+p+U8sLdRdWzfYrjEK2iwx7Vqtu9EtFiTu8iY6LBAotw= =FmaL -----END PGP SIGNATURE-----