[Git][security-tracker-team/security-tracker][master] Track fixed version for thunderbird issues fixed via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Dec 11 19:20:48 GMT 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
d1f9dced by Salvatore Bonaccorso at 2025-12-11T20:20:12+01:00
Track fixed version for thunderbird issues fixed via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1596,7 +1596,7 @@ CVE-2025-14333 (Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14333
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14333
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14333
@@ -1607,7 +1607,7 @@ CVE-2025-14331 (Same-origin policy bypass in the Request Handling component. Thi
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14331
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14331
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14331
@@ -1615,7 +1615,7 @@ CVE-2025-14330 (JIT miscompilation in the JavaScript Engine: JIT component. This
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14330
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14330
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14330
@@ -1623,7 +1623,7 @@ CVE-2025-14329 (Privilege escalation in the Netmonitor component. This vulnerabi
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14329
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14329
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14329
@@ -1631,7 +1631,7 @@ CVE-2025-14328 (Privilege escalation in the Netmonitor component. This vulnerabi
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14328
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14328
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14328
@@ -1645,7 +1645,7 @@ CVE-2025-14325 (JIT miscompilation in the JavaScript Engine: JIT component. This
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14325
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14325
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14325
@@ -1653,7 +1653,7 @@ CVE-2025-14324 (JIT miscompilation in the JavaScript Engine: JIT component. This
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14324
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14324
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14324
@@ -1661,7 +1661,7 @@ CVE-2025-14323 (Privilege escalation in the DOM: Notifications component. This v
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14323
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14323
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14323
@@ -1669,7 +1669,7 @@ CVE-2025-14322 (Sandbox escape due to incorrect boundary conditions in the Graph
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14322
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14322
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14322
@@ -1677,7 +1677,7 @@ CVE-2025-14321 (Use-after-free in the WebRTC: Signaling component. This vulnerab
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14321
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14321
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14321
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d1f9dcedf4cf5564ed413fe0706cf7088969b5f0
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d1f9dcedf4cf5564ed413fe0706cf7088969b5f0
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251211/db0adead/attachment.htm>
More information about the debian-security-tracker-commits
mailing list