[Git][security-tracker-team/security-tracker][master] thunderbird fixed in si

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Oct 22 21:03:17 BST 2026



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3e450d0e by Moritz Muehlenhoff at 2026-10-22T20:39:09+02:00
thunderbird fixed in si

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2895,13 +2895,13 @@ CVE-2026-113869 (When Thunderbird asked for a security device password (for exam
 	- thunderbird <not-affected> (Only affects Thunderbird post ESR153)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-114/#CVE-2026-113869
 CVE-2026-113868 (When authenticating to a POP3 or SMTP server using NTLM, Thunderbird d ...)
-	- thunderbird <unfixed>
+	- thunderbird 1:153.5.1esr-1
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/#CVE-2026-113868
 CVE-2026-113867 (Thunderbird did not escape attribute values when serializing outgoing  ...)
-	- thunderbird <unfixed>
+	- thunderbird 1:153.5.1esr-1
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/#CVE-2026-113867
 CVE-2026-113866 (When setting up an account, Thunderbird's Exchange AutoDiscover lookup ...)
-	- thunderbird <unfixed>
+	- thunderbird 1:153.5.1esr-1
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/#CVE-2026-113866
 CVE-2026-113776 (virtualenv is a tool for creating isolated virtual python environments ...)
 	TODO: check
@@ -5488,7 +5488,7 @@ CVE-2026-113470 (Cryptographic issue in the Security Block-lists, Allow-lists, a
 	{DSA-6573-1 DLA-4847-1}
 	- firefox 158.0.1-1
 	- firefox-esr 153.5.1esr-1
-	- thunderbird <unfixed>
+	- thunderbird 1:153.5.1esr-1
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-111/#CVE-2026-113470
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-112/#CVE-2026-113470
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-115/#CVE-2026-113866



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3e450d0ece970048d476ac6dca4f0044885d12ec

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3e450d0ece970048d476ac6dca4f0044885d12ec
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261022/c5168761/attachment.htm>


More information about the debian-security-tracker-commits mailing list