[Git][security-tracker-team/security-tracker][master] Reserve DLA-4727-1 for thunderbird
Emilio Pozuelo Monfort (@pochu)
pochu at debian.org
Mon Aug 10 09:09:19 BST 2026
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker
Commits:
8f3a4da5 by Emilio Pozuelo Monfort at 2026-08-10T09:55:31+02:00
Reserve DLA-4727-1 for thunderbird
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,7 @@
+[10 Aug 2026] DLA-4727-1 thunderbird - security update
+ {CVE-2026-14899 CVE-2026-15718 CVE-2026-15719 CVE-2026-16349 CVE-2026-16350 CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354 CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16358 CVE-2026-16359 CVE-2026-16360 CVE-2026-16361 CVE-2026-16362 CVE-2026-16363 CVE-2026-16368 CVE-2026-16369 CVE-2026-16371 CVE-2026-16374 CVE-2026-16375 CVE-2026-16377 CVE-2026-16379 CVE-2026-16381 CVE-2026-16383 CVE-2026-16387 CVE-2026-16390 CVE-2026-16391 CVE-2026-16396 CVE-2026-16405 CVE-2026-16412 CVE-2026-57962 CVE-2026-57963}
+ [bullseye] - thunderbird 1:140.13.0esr-2~deb11u1
+ [bookworm] - thunderbird 1:140.13.0esr-2~deb12u1
[09 Aug 2026] DLA-4726-1 ca-certificates - CA certificates update
[bullseye] - ca-certificates 20250419~deb12u1~deb11u1
[bookworm] - ca-certificates 20250419~deb12u1
=====================================
data/dla-needed.txt
=====================================
@@ -903,9 +903,6 @@ symfony/bullseye
NOTE: 20260521: at least 1 SQLI and 1 stored XSS.
NOTE: 20260521: Upcoming DSA (Beuc/front-desk)
--
-thunderbird (Emilio)
- NOTE: 20260721: Added by pochu
---
tiff
NOTE: 20260709: Added by Front-Desk (utkarsh)
NOTE: 20260709: CVE-2026-12912 (fixed 4.7.2rc2) + CVE-2026-36849 (read-buffer alloc);
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f3a4da586018967ab5dc4723e630cf86c64af97
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f3a4da586018967ab5dc4723e630cf86c64af97
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260810/78cefceb/attachment.htm>
More information about the debian-security-tracker-commits
mailing list