[Git][security-tracker-team/security-tracker][master] thunderbird fixed in sid
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Thu Mar 6 18:56:34 GMT 2025
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
81f27d19 by Moritz Muehlenhoff at 2025-03-06T19:56:13+01:00
thunderbird fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -531,7 +531,7 @@ CVE-2025-1938 (Memory safety bugs present in Firefox 135, Thunderbird 135, Firef
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1938
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1938
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1938
@@ -539,7 +539,7 @@ CVE-2025-1937 (Memory safety bugs present in Firefox 135, Thunderbird 135, Firef
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1937
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1937
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1937
@@ -547,7 +547,7 @@ CVE-2025-1936 (jar: URLs retrieve local file content packaged in a ZIP archive.
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1936
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1936
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1936
@@ -555,7 +555,7 @@ CVE-2025-1935 (A web page could trick a user into setting that site as the defau
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1935
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1935
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1935
@@ -569,7 +569,7 @@ CVE-2025-1934 (It was possible to interrupt the processing of a RegExp bailout a
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1934
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1934
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1934
@@ -580,7 +580,7 @@ CVE-2025-1933 (On 64-bit CPUs, when the JIT compiles WASM i32 return values they
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1933
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1933
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1932
@@ -588,7 +588,7 @@ CVE-2025-1932 (An inconsistent comparator in xslt/txNodeSorter could have result
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1932
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1932
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1932
@@ -596,7 +596,7 @@ CVE-2025-1931 (It was possible to cause a use-after-free in the content process
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1931
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1931
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1931
@@ -21108,7 +21108,7 @@ CVE-2024-43762 (In multiple locations, there is a possible way to avoid unbindin
CVE-2024-43097 (In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds ...)
{DSA-5874-1}
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2024-43097
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2024-43097
CVE-2024-43077 (In DevmemValidateFlags of devicemem_server.c , there is a possible out ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81f27d19df468f209d532930a4618913b2d46387
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81f27d19df468f209d532930a4618913b2d46387
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250306/4b2c3ad5/attachment.htm>
More information about the debian-security-tracker-commits
mailing list