[Git][security-tracker-team/security-tracker][master] thunderbird fixed in sid
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Wed Apr 30 13:33:12 BST 2025
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
f00fe2fc by Moritz Mühlenhoff at 2025-04-30T14:32:59+02:00
thunderbird fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -162,7 +162,7 @@ CVE-2023-4377
REJECTED
CVE-2025-4093 (Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. ...)
- firefox-esr 128.10.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.10.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/#CVE-2025-4093
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-32/#CVE-2025-4093
CVE-2025-4092 (Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of ...)
@@ -171,7 +171,7 @@ CVE-2025-4092 (Memory safety bugs present in Firefox 137 and Thunderbird 137. So
CVE-2025-4091 (Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ES ...)
- firefox 138.0-1
- firefox-esr 128.10.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.10.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-28/#CVE-2025-4091
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/#CVE-2025-4091
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-32/#CVE-2025-4091
@@ -187,7 +187,7 @@ CVE-2025-4088 (A security vulnerability in Firefox allowed malicious sites to us
CVE-2025-4087 (A vulnerability was identified in Firefox where XPath parsing could tr ...)
- firefox 138.0-1
- firefox-esr 128.10.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.10.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-28/#CVE-2025-4087
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/#CVE-2025-4087
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-32/#CVE-2025-4087
@@ -205,7 +205,7 @@ CVE-2025-4084 (Due to insufficient escaping of the special characters in the "co
CVE-2025-4083 (A process isolation vulnerability in Firefox stemmed from improper han ...)
- firefox 138.0-1
- firefox-esr 128.10.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.10.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-28/#CVE-2025-4083
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-29/#CVE-2025-4083
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-32/#CVE-2025-4083
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f00fe2fc21eb5e2cc64142998c5639344cd1fe4e
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f00fe2fc21eb5e2cc64142998c5639344cd1fe4e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250430/b50dd532/attachment.htm>
More information about the debian-security-tracker-commits
mailing list