[Git][security-tracker-team/security-tracker][master] Track fixes for thunderbird via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Oct 16 04:14:17 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
215d4811 by Salvatore Bonaccorso at 2026-10-16T05:13:46+02:00
Track fixes for thunderbird via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6623,7 +6623,7 @@ CVE-2026-11731 (An authentication bypass vulnerability in the listed NETGEAR RAX
CVE-2026-11730 (Insufficient session randomness vulnerability in the listed NETGEAR Ex ...)
NOT-FOR-US: Netgear
CVE-2026-110249 (A malicious, compromised, or MITM-controlled Exchange server can retur ...)
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-110249
CVE-2026-110247 (Several buffer-growth sites in libmime performed size arithmetic in 32 ...)
- thunderbird <unfixed>
@@ -7284,7 +7284,7 @@ CVE-2026-109705 (Sandbox escape, site isolation issue due to incorrect boundary
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109705
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109705
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109705
@@ -7292,7 +7292,7 @@ CVE-2026-109706 (Use-after-free in the Storage: IndexedDB component. This vulner
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109706
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109706
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109706
@@ -7300,7 +7300,7 @@ CVE-2026-109707 (Sandbox escape due to use-after-free in the Networking componen
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109707
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109707
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109707
@@ -7308,7 +7308,7 @@ CVE-2026-109708 (Sandbox escape due to incorrect boundary conditions in the Netw
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109708
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109708
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109708
@@ -7316,7 +7316,7 @@ CVE-2026-109709 (Information disclosure, privilege escalation in the Security: P
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109709
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109709
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109709
@@ -7324,7 +7324,7 @@ CVE-2026-109710 (Use-after-free in the Graphics: Text component. This vulnerabil
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109710
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109710
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109710
@@ -7332,7 +7332,7 @@ CVE-2026-109711 (Use-after-free in the Graphics: Canvas2D component. This vulner
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109711
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109711
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109711
@@ -7340,7 +7340,7 @@ CVE-2026-109712 (Sandbox escape due to uninitialized memory in the Graphics comp
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109712
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109712
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109712
@@ -7348,7 +7348,7 @@ CVE-2026-109713 (Use-after-free in the Crash Reporting component. This vulnerabi
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109713
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109713
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109713
@@ -7359,7 +7359,7 @@ CVE-2026-109715 (Incorrect boundary conditions in the JavaScript Engine componen
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109715
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109715
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109715
@@ -7367,7 +7367,7 @@ CVE-2026-109716 (Incorrect boundary conditions in the JavaScript Engine componen
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109716
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109716
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109716
@@ -7375,7 +7375,7 @@ CVE-2026-109717 (Use-after-free in the DOM: Bindings (WebIDL) component. This vu
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109717
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109717
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109717
@@ -7383,7 +7383,7 @@ CVE-2026-109718 (Use-after-free in the XML component. This vulnerability was fix
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109718
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109718
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109718
@@ -7391,7 +7391,7 @@ CVE-2026-109719 (Race condition, use-after-free in the Graphics: CanvasWebGL com
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109719
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109719
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109719
@@ -7399,7 +7399,7 @@ CVE-2026-109720 (JIT miscompilation in the JavaScript: WebAssembly component. Th
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109720
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109720
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109720
@@ -7407,7 +7407,7 @@ CVE-2026-109721 (Incorrect boundary conditions in the JavaScript Engine: JIT com
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109721
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109721
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109721
@@ -7415,7 +7415,7 @@ CVE-2026-109722 (JIT miscompilation in the JavaScript Engine: JIT component. Thi
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109722
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109722
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109722
@@ -7423,7 +7423,7 @@ CVE-2026-109723 (Integer overflow in the Layout: Text and Fonts component. This
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109723
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109723
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109723
@@ -7431,7 +7431,7 @@ CVE-2026-109724 (Use-after-free in the DOM: Core & HTML component. This vulnerab
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109724
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109724
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109724
@@ -7439,14 +7439,14 @@ CVE-2026-109725 (Use-after-free in the DOM: Core & HTML component. This vulnerab
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109725
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109725
CVE-2026-109726 (Use-after-free in the SVG component. This vulnerability was fixed in F ...)
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109726
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109726
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109726
@@ -7454,7 +7454,7 @@ CVE-2026-109727 (Use-after-free in the Audio/Video component. This vulnerability
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109727
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109727
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109727
@@ -7462,7 +7462,7 @@ CVE-2026-109728 (Use-after-free in the DOM: Animation component. This vulnerabil
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109728
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109728
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109728
@@ -7470,7 +7470,7 @@ CVE-2026-109729 (Use-after-free in the JavaScript Engine: JIT component. This vu
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109729
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109729
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109729
@@ -7478,7 +7478,7 @@ CVE-2026-109730 (Integer overflow in the Graphics component. This vulnerability
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109730
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109730
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109730
@@ -7486,7 +7486,7 @@ CVE-2026-109731 (Incorrect boundary conditions in the Graphics: Canvas2D compone
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109731
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109731
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109731
@@ -7494,7 +7494,7 @@ CVE-2026-109732 (Use-after-free in the DOM: Streams component. This vulnerabilit
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109732
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109732
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109732
@@ -7502,7 +7502,7 @@ CVE-2026-109733 (JIT miscompilation in the JavaScript Engine: JIT component. Thi
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109733
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109733
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109733
@@ -7510,7 +7510,7 @@ CVE-2026-109734 (Mitigation bypass in the DOM: Security component. This vulnerab
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109734
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109734
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109734
@@ -7521,7 +7521,7 @@ CVE-2026-109736 (Frame poisoning in the Layout component. This vulnerability was
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109736
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109736
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109736
@@ -7529,7 +7529,7 @@ CVE-2026-109737 (Mitigation bypass in the Enterprise Policies component. This vu
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109737
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109737
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109737
@@ -7537,7 +7537,7 @@ CVE-2026-109738 (Use-after-free in the Audio/Video: Playback component. This vul
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109738
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109738
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109738
@@ -7555,7 +7555,7 @@ CVE-2026-109741 (Use-after-free in the Storage: Bucket File System component. Th
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109741
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109741
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109741
@@ -7563,7 +7563,7 @@ CVE-2026-109742 (Information disclosure in the PDF Viewer component. This vulner
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109742
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109742
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109742
@@ -7571,7 +7571,7 @@ CVE-2026-109743 (Privilege escalation in the Panning and Zooming component. This
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109743
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109743
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109743
@@ -7579,7 +7579,7 @@ CVE-2026-109744 (Other issue in the DOM: File component. This vulnerability was
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109744
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109744
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109744
@@ -7587,7 +7587,7 @@ CVE-2026-109745 (Sandbox escape due to uninitialized memory in the DOM: Web Seri
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109745
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109745
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109745
@@ -7610,7 +7610,7 @@ CVE-2026-109751 (Information disclosure in the Networking component. This vulner
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109751
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109751
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109751
@@ -7618,7 +7618,7 @@ CVE-2026-109752 (Use-after-free in the DOM: Workers component. This vulnerabilit
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109752
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109752
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109752
@@ -7626,7 +7626,7 @@ CVE-2026-109753 (Incorrect boundary conditions in the Layout component. This vul
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109753
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109753
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109753
@@ -7634,7 +7634,7 @@ CVE-2026-109754 (Incorrect boundary conditions in the DOM: Editor component. Thi
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109754
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109754
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109754
@@ -7645,7 +7645,7 @@ CVE-2026-109756 (Privilege escalation in the DOM: Navigation component. This vul
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109756
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109756
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109756
@@ -7653,7 +7653,7 @@ CVE-2026-109757 (Sandbox escape due to race condition in the Networking componen
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109757
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109757
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109757
@@ -7661,7 +7661,7 @@ CVE-2026-109759 (Site isolation issue in the Networking component. This vulnerab
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109759
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109759
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109759
@@ -7669,7 +7669,7 @@ CVE-2026-109760 (Mitigation bypass in the Networking: HTTP component. This vulne
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109760
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109760
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109760
@@ -7680,7 +7680,7 @@ CVE-2026-109762 (Incorrect boundary conditions in the SVG component. This vulner
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109762
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109762
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109762
@@ -7688,7 +7688,7 @@ CVE-2026-109763 (Mitigation bypass in the File Handling component. This vulnerab
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109763
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109763
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109763
@@ -7696,7 +7696,7 @@ CVE-2026-109764 (Mitigation bypass in the Enterprise Policies component. This vu
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109764
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109764
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109764
@@ -7704,7 +7704,7 @@ CVE-2026-109765 (Race condition, use-after-free in the Graphics: Text component.
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109765
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109765
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109765
@@ -7712,7 +7712,7 @@ CVE-2026-109766 (Mitigation bypass in the Enterprise Policies component. This vu
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109766
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109766
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109766
@@ -7720,7 +7720,7 @@ CVE-2026-109767 (Information disclosure in the Networking component. This vulner
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109767
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109767
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109767
@@ -7734,7 +7734,7 @@ CVE-2026-109770 (Spoofing issue in the DOM: Web Serial component. This vulnerabi
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109770
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109770
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109770
@@ -7754,7 +7754,7 @@ CVE-2026-109775 (Denial-of-service in the WebRTC component. This vulnerability w
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109775
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109775
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109775
@@ -7762,7 +7762,7 @@ CVE-2026-109776 (Race condition in the XPCOM component. This vulnerability was f
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109776
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109776
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109776
@@ -7770,7 +7770,7 @@ CVE-2026-109777 (Information disclosure in the Storage: IndexedDB component. Thi
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109777
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109777
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109777
@@ -7778,7 +7778,7 @@ CVE-2026-109778 (Privilege escalation in the WebExtensions component. This vulne
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109778
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109778
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109778
@@ -7792,7 +7792,7 @@ CVE-2026-109781 (Denial-of-service in the Printing: Output component. This vulne
{DSA-6560-1 DLA-4836-1}
- firefox 158.0-1
- firefox-esr 153.5.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.0esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109781
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109781
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109781
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/215d4811664bf158b9ce3613eff329211bcca455
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/215d4811664bf158b9ce3613eff329211bcca455
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/bde44d84/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list