[Git][security-tracker-team/security-tracker][master] thunderbird fixed in si
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Thu Oct 22 21:03:17 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
3e450d0e by Moritz Muehlenhoff at 2026-10-22T20:39:09+02:00
thunderbird fixed in si
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2895,13 +2895,13 @@ CVE-2026-113869 (When Thunderbird asked for a security device password (for exam
- thunderbird <not-affected> (Only affects Thunderbird post ESR153)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-114/#CVE-2026-113869
CVE-2026-113868 (When authenticating to a POP3 or SMTP server using NTLM, Thunderbird d ...)
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.1esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/#CVE-2026-113868
CVE-2026-113867 (Thunderbird did not escape attribute values when serializing outgoing ...)
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.1esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/#CVE-2026-113867
CVE-2026-113866 (When setting up an account, Thunderbird's Exchange AutoDiscover lookup ...)
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.1esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/#CVE-2026-113866
CVE-2026-113776 (virtualenv is a tool for creating isolated virtual python environments ...)
TODO: check
@@ -5488,7 +5488,7 @@ CVE-2026-113470 (Cryptographic issue in the Security Block-lists, Allow-lists, a
{DSA-6573-1 DLA-4847-1}
- firefox 158.0.1-1
- firefox-esr 153.5.1esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.5.1esr-1
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-111/#CVE-2026-113470
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-112/#CVE-2026-113470
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/#CVE-2026-113866
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3e450d0ece970048d476ac6dca4f0044885d12ec
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3e450d0ece970048d476ac6dca4f0044885d12ec
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/c5168761/attachment.htm>
More information about the debian-security-tracker-commits
mailing list