[Git][security-tracker-team/security-tracker][master] Reserve DLA-4727-1 for thunderbird

Emilio Pozuelo Monfort (@pochu) pochu at debian.org
Mon Aug 10 09:09:19 BST 2026



Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8f3a4da5 by Emilio Pozuelo Monfort at 2026-08-10T09:55:31+02:00
Reserve DLA-4727-1 for thunderbird

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,7 @@
+[10 Aug 2026] DLA-4727-1 thunderbird - security update
+	{CVE-2026-14899 CVE-2026-15718 CVE-2026-15719 CVE-2026-16349 CVE-2026-16350 CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354 CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16358 CVE-2026-16359 CVE-2026-16360 CVE-2026-16361 CVE-2026-16362 CVE-2026-16363 CVE-2026-16368 CVE-2026-16369 CVE-2026-16371 CVE-2026-16374 CVE-2026-16375 CVE-2026-16377 CVE-2026-16379 CVE-2026-16381 CVE-2026-16383 CVE-2026-16387 CVE-2026-16390 CVE-2026-16391 CVE-2026-16396 CVE-2026-16405 CVE-2026-16412 CVE-2026-57962 CVE-2026-57963}
+	[bullseye] - thunderbird 1:140.13.0esr-2~deb11u1
+	[bookworm] - thunderbird 1:140.13.0esr-2~deb12u1
 [09 Aug 2026] DLA-4726-1 ca-certificates - CA certificates update
 	[bullseye] - ca-certificates 20250419~deb12u1~deb11u1
 	[bookworm] - ca-certificates 20250419~deb12u1


=====================================
data/dla-needed.txt
=====================================
@@ -903,9 +903,6 @@ symfony/bullseye
   NOTE: 20260521: at least 1 SQLI and 1 stored XSS.
   NOTE: 20260521: Upcoming DSA (Beuc/front-desk)
 --
-thunderbird (Emilio)
-  NOTE: 20260721: Added by pochu
---
 tiff
   NOTE: 20260709: Added by Front-Desk (utkarsh)
   NOTE: 20260709: CVE-2026-12912 (fixed 4.7.2rc2) + CVE-2026-36849 (read-buffer alloc);



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f3a4da586018967ab5dc4723e630cf86c64af97

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f3a4da586018967ab5dc4723e630cf86c64af97
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260810/78cefceb/attachment.htm>


More information about the debian-security-tracker-commits mailing list