-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 21:02:12 -0400 Source: thunderbird Architecture: source Version: 1:140.17.0esr-1~deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Carsten Schoenert Changed-By: Christoph Goehre Changes: thunderbird (1:140.17.0esr-1~deb13u1) trixie-security; urgency=medium . * [59b44f0] New upstream version 140.17.0esr Fixed CVE issues in upstream version 140.17 (MFSA 2026-102): CVE-2026-103500: Heap buffer overflow opening large email CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component CVE-2026-100757: Use-after-free in the Widget component CVE-2026-100758: Sandbox escape in the DOM: Navigation component CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-100766: Information disclosure in the Networking: JAR component CVE-2026-100767: Use-after-free in the Networking: Cache component CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component CVE-2026-100771: Undefined behavior in the DOM: Streams component CVE-2026-100772: Use-after-free in the DOM: Core & HTML component CVE-2026-100773: Use-after-free in the Storage: IndexedDB component CVE-2026-100774: Use-after-free in the DOM: Core & HTML component CVE-2026-100775: Sandbox escape in the Graphics component CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component CVE-2026-100779: Use-after-free in the XSLT component CVE-2026-100780: Use-after-free in the DOM: Core & HTML component CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component CVE-2026-100783: Uninitialized memory in the Audio/Video component CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component CVE-2026-100785: Use-after-free in the DOM: Core & HTML component CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component CVE-2026-100790: Use-after-free in the XSLT component CVE-2026-100791: Use-after-free in the DOM: Core & HTML component CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component CVE-2026-96869: Information disclosure in the Networking component CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component CVE-2026-100801: Privilege escalation in the DLL Services component CVE-2026-100803: Same-origin policy bypass in the WebExtensions component CVE-2026-100807: Privilege escalation in the DOM: Service Workers component CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component CVE-2026-100820: Privilege escalation in the Address Bar component CVE-2026-100821: Site isolation issue in the Panning and Zooming component Checksums-Sha1: 83db2b5df74789706ba671cd8768dd7b302fc4a3 8496 thunderbird_140.17.0esr-1~deb13u1.dsc 2b50f8ef5ecb39848ff42464b22c14a1a043d727 12281336 thunderbird_140.17.0esr.orig-thunderbird-l10n.tar.xz ee16589efd16073359ed153e309489a59fbd2b0c 784673056 thunderbird_140.17.0esr.orig.tar.xz 16e917d9ddb7cd41d3c89011570f9c0233f6dbc5 573136 thunderbird_140.17.0esr-1~deb13u1.debian.tar.xz Checksums-Sha256: 9e0d6b63b273804c3f61bd2fa96739c9325834151adc3cfd8342e9826b00ffb9 8496 thunderbird_140.17.0esr-1~deb13u1.dsc e936c6abde03ed062e0f0ce3f1ca61d444a535e25672d1263b64c97945a32fc9 12281336 thunderbird_140.17.0esr.orig-thunderbird-l10n.tar.xz ea084fef8469fbc5848a7867e3b080a63d977b6ae26dd138ccde83dd9684b2cc 784673056 thunderbird_140.17.0esr.orig.tar.xz ee44ab6af5ff7ce650cf08dc795a7e58595447bed344472d5450e9db4024e9dd 573136 thunderbird_140.17.0esr-1~deb13u1.debian.tar.xz Files: b803dc8bbab776851a4b8abbcc68d9de 8496 mail optional thunderbird_140.17.0esr-1~deb13u1.dsc 68242e0c408756d9156879ae93d81716 12281336 mail optional thunderbird_140.17.0esr.orig-thunderbird-l10n.tar.xz b60829028c915e638cf270471857e500 784673056 mail optional thunderbird_140.17.0esr.orig.tar.xz 306e6a3c4f62a661470686ec8b0e0816 573136 mail optional thunderbird_140.17.0esr-1~deb13u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEi5SBnCVVcKN0tizNJuPIdadEIO8FAmq9u/AACgkQJuPIdadE IO+aTA//XUVIoxXR1fODSG4YFCTYOGey/KziUYTK6I/OOIyPO43LNIiyvNYVghYH 9abkcLLxwNfHKvALbsgGZ1/E8Hs7aRraEAwbJl80FscJHWIea7kDthySHCBh5D77 G6e40paLWBQGSrOR/m6LL9GFTLqjahZ9jY/8FXaWA/Iq2e8ck+9TskjBixrY+s0X WodSkamXzw+tntPJmc7Vlbpm1DHa5yA/psFDdKxxVMRr9NvINcHhviSOyGoBEcqE 3R9FhM0nsYwGrpUXhv3OEPK0hbRvPE/GGtAkv6WG3njq4DXVrkXZgOTPG9kFeegt Yhv4Itm6FlaR5JAtEKKN4KHGuMMIbVStfSu66XlYM1zXqIAI5SZOp6EQnl1h7ska yK9QKbUR/QpaYQAruyiGEKQIAnnfU01MEP9a/1Htz+8DvLXUSiKIaWftzLRjFLRh OSKPcW2MijfdRzFwjz7t8GD1uL+no46SRMYF9Ks83bBZlJRuIFvPq5GEOUH8+kxM ZQFAiMol+oDrr7THLq5igG3hHSWP+cAfph1pxdYYjlPyX6+0PrM5jZJ2nC1/HUH2 HofSGMnXHBdom2jPBbhfWz3HFK1BQmt6vY1saQ8k1v7p0+Q090IMfJ8n6AiIUlFQ TWUof4rto0VpshdullR1fWEKsC3+9wWi1gacGNfmfsineCqQDTA= =H+eY -----END PGP SIGNATURE-----