[Git][security-tracker-team/security-tracker][master] two thunderbird issues n/a

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eb2f587c by Moritz Muehlenhoff at 2026-09-02T12:13:45+02:00
two thunderbird issues n/a

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21,7 +21,8 @@ CVE-2026-84695 (BookStack before 26.05.4 contains a stored cross-site scripting
 CVE-2026-84694 (Coolify before 4.2.0 fails to properly escape environment variable key ...)
 	NOT-FOR-US: Coolify
 CVE-2026-84642 (The values of the mail.allowed_attachment_hostnames advanced config se ...)
-	TODO: check
+	- thunderbird <not-affected> (Thunderbird ESR140 series not affected)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-86/#CVE-2026-84642
 CVE-2026-84641 (A malicious IMAP server can trigger use-after-free and heap-memory dis ...)
 	- thunderbird <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-87/#CVE-2026-84641
@@ -32,7 +33,8 @@ CVE-2026-84639 (Triggering an error condition in certain MIME bodies would cause
 	- thunderbird <unfixed>
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-87/#CVE-2026-84639
 CVE-2026-84637 (Malicious calendar invitations could use file URI attachments to launc ...)
-	TODO: check
+	- thunderbird <not-affected> (Windows-specific)
+	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-78/#CVE-2026-84637
 CVE-2026-84485 (APITable through 1.13.0-beta.1 exposes the internal organization loadO ...)
 	NOT-FOR-US: APITable
 CVE-2026-84484 (ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerabil ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eb2f587cd2d174d7ac2ac2c62341d41ff49f0f9a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eb2f587cd2d174d7ac2ac2c62341d41ff49f0f9a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260902/c3a77c39/attachment-0001.htm>