[Git][security-tracker-team/security-tracker][master] Add thunderbird issues from mfsa2026-64

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jul 2 07:50:42 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
08763533 by Salvatore Bonaccorso at 2026-07-02T08:50:16+02:00
Add thunderbird issues from mfsa2026-64

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -591,9 +591,11 @@ CVE-2026-58446 (Presenton before 0.8.8-beta bundles an MCP server that, on serve
 CVE-2026-57995 (phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in ...)
 	NOT-FOR-US: phpMyFAQ
 CVE-2026-57963 (An attacker who can send HTML chat messages (via Matrix or XMPP) can i ...)
-	TODO: check
+	- thunderbird <unfixed>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-64/#CVE-2026-57963
 CVE-2026-57962 (A malicious LDAP server, which a Thunderbird user is configured to que ...)
-	TODO: check
+	- thunderbird <unfixed>
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-64/#CVE-2026-57962
 CVE-2026-57585 (MessagePack is the serializer implementation for Python msgpack.org. P ...)
 	TODO: check
 CVE-2026-57204 (pypdf is a free and open-source pure-python PDF library. Prior to 6.13 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0876353326cd9d523c5fb88c68eca1109ca692c5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0876353326cd9d523c5fb88c68eca1109ca692c5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260702/509a0653/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list