[Git][security-tracker-team/security-tracker][master] Reserve DLA-4754-1 for thunderbird

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ff5a6bb7 by Emilio Pozuelo Monfort at 2026-08-25T09:15:30+02:00
Reserve DLA-4754-1 for thunderbird

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,7 @@
+[25 Aug 2026] DLA-4754-1 thunderbird - security update
+	{CVE-2026-74934 CVE-2026-74935 CVE-2026-74936 CVE-2026-74939 CVE-2026-74940 CVE-2026-74941 CVE-2026-74942 CVE-2026-74943 CVE-2026-74944 CVE-2026-74945 CVE-2026-74946 CVE-2026-74948 CVE-2026-74949 CVE-2026-74953 CVE-2026-74957 CVE-2026-74959 CVE-2026-74960 CVE-2026-74962 CVE-2026-74963 CVE-2026-74964 CVE-2026-74965 CVE-2026-74967 CVE-2026-74969 CVE-2026-74971 CVE-2026-74972 CVE-2026-74973 CVE-2026-74974 CVE-2026-74976 CVE-2026-74983 CVE-2026-74987 CVE-2026-74990}
+	[bullseye] - thunderbird 1:140.14.0esr-1~deb11u1
+	[bookworm] - thunderbird 1:140.14.0esr-1~deb12u1
 [24 Aug 2026] DLA-4753-1 nvidia-graphics-drivers - security update
 	{CVE-2025-23280 CVE-2025-23282 CVE-2025-23300 CVE-2025-23330 CVE-2025-23332 CVE-2025-23345 CVE-2025-33219}
 	[bookworm] - nvidia-graphics-drivers 535.309.01-0+deb12u1


=====================================
data/dla-needed.txt
=====================================
@@ -892,9 +892,6 @@ symfony/bullseye
   NOTE: 20260521: at least 1 SQLI and 1 stored XSS.
   NOTE: 20260521: Upcoming DSA (Beuc/front-desk)
 --
-thunderbird (Emilio)
-  NOTE: 20260819: Added by Front-Desk (lamby)
---
 tiff
   NOTE: 20260709: Added by Front-Desk (utkarsh)
   NOTE: 20260709: CVE-2026-12912 (fixed 4.7.2rc2) + CVE-2026-36849 (read-buffer alloc);



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff5a6bb7b5ddfb378a766f10a0990ce7ada35fa1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff5a6bb7b5ddfb378a766f10a0990ce7ada35fa1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260825/acb2276a/attachment-0001.htm>