[Git][security-tracker-team/security-tracker][master] libpng, thunderbird DSAs

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Oct 1 19:32:48 BST 2026



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1a7c43ff by Moritz Mühlenhoff at 2026-10-01T20:32:16+02:00
libpng, thunderbird DSAs

- - - - -


2 changed files:

- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/DSA/list
=====================================
@@ -1,3 +1,9 @@
+[01 Oct 2026] DSA-6537-1 libpng1.6 - security update
+	{CVE-2026-46675}
+	[trixie] - libpng1.6 1.6.48-1+deb13u6
+[01 Oct 2026] DSA-6536-1 thunderbird - security update
+	{CVE-2026-92035 CVE-2026-96869 CVE-2026-100756 CVE-2026-100757 CVE-2026-100758 CVE-2026-100759 CVE-2026-100762 CVE-2026-100766 CVE-2026-100767 CVE-2026-100769 CVE-2026-100770 CVE-2026-100771 CVE-2026-100772 CVE-2026-100773 CVE-2026-100774 CVE-2026-100775 CVE-2026-100776 CVE-2026-100777 CVE-2026-100778 CVE-2026-100779 CVE-2026-100780 CVE-2026-100781 CVE-2026-100782 CVE-2026-100783 CVE-2026-100784 CVE-2026-100785 CVE-2026-100786 CVE-2026-100788 CVE-2026-100789 CVE-2026-100790 CVE-2026-100791 CVE-2026-100792 CVE-2026-100794 CVE-2026-100797 CVE-2026-100801 CVE-2026-100803 CVE-2026-100807 CVE-2026-100811 CVE-2026-100818 CVE-2026-100819 CVE-2026-100820 CVE-2026-100821 CVE-2026-100832 CVE-2026-103500}
+	[trixie] - thunderbird 1:140.17.0esr-1~deb13u1
 [01 Oct 2026] DSA-6535-1 chromium - security update
 	{CVE-2026-102299 CVE-2026-102300 CVE-2026-102301 CVE-2026-102302 CVE-2026-102303 CVE-2026-102304 CVE-2026-102305 CVE-2026-102306 CVE-2026-102307 CVE-2026-102308 CVE-2026-102309 CVE-2026-102310 CVE-2026-102311 CVE-2026-102312 CVE-2026-102313 CVE-2026-102314 CVE-2026-102315 CVE-2026-102316 CVE-2026-102317 CVE-2026-102318 CVE-2026-102319 CVE-2026-102320 CVE-2026-102321 CVE-2026-102323 CVE-2026-102324 CVE-2026-102325 CVE-2026-102326 CVE-2026-102327 CVE-2026-102328 CVE-2026-102329 CVE-2026-102330 CVE-2026-102331}
 	[trixie] - chromium 154.0.8037.92-1~deb13u1


=====================================
data/dsa-needed.txt
=====================================
@@ -73,8 +73,6 @@ kitty
 --
 libnet-idn-encode-perl (carnil)
 --
-libpng1.6 (jmm)
---
 linux (carnil)
   Wait until more issues have piled up, though try to regulary rebase for point
   releases to more 6.12.y versions
@@ -165,8 +163,6 @@ sogo
 --
 squid
 --
-thunderbird (jmm)
---
 tomcat10
   Bastien Roucaries proposed an update for review
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a7c43fff40d6cb0445784b6e5ac1464c2a90f5c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a7c43fff40d6cb0445784b6e5ac1464c2a90f5c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/a01fb94a/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list