-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 21:02:12 -0400 Source: thunderbird Binary: thunderbird thunderbird-dbgsym Architecture: i386 Version: 1:140.17.0esr-1~deb13u1 Distribution: trixie-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Christoph Goehre Description: thunderbird - mail/news client with RSS, chat and integrated spam filter suppor Changes: thunderbird (1:140.17.0esr-1~deb13u1) trixie-security; urgency=medium . * [59b44f0] New upstream version 140.17.0esr Fixed CVE issues in upstream version 140.17 (MFSA 2026-102): CVE-2026-103500: Heap buffer overflow opening large email CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component CVE-2026-100757: Use-after-free in the Widget component CVE-2026-100758: Sandbox escape in the DOM: Navigation component CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-100766: Information disclosure in the Networking: JAR component CVE-2026-100767: Use-after-free in the Networking: Cache component CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component CVE-2026-100771: Undefined behavior in the DOM: Streams component CVE-2026-100772: Use-after-free in the DOM: Core & HTML component CVE-2026-100773: Use-after-free in the Storage: IndexedDB component CVE-2026-100774: Use-after-free in the DOM: Core & HTML component CVE-2026-100775: Sandbox escape in the Graphics component CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component CVE-2026-100779: Use-after-free in the XSLT component CVE-2026-100780: Use-after-free in the DOM: Core & HTML component CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component CVE-2026-100783: Uninitialized memory in the Audio/Video component CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component CVE-2026-100785: Use-after-free in the DOM: Core & HTML component CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component CVE-2026-100790: Use-after-free in the XSLT component CVE-2026-100791: Use-after-free in the DOM: Core & HTML component CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component CVE-2026-96869: Information disclosure in the Networking component CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component CVE-2026-100801: Privilege escalation in the DLL Services component CVE-2026-100803: Same-origin policy bypass in the WebExtensions component CVE-2026-100807: Privilege escalation in the DOM: Service Workers component CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component CVE-2026-100820: Privilege escalation in the Address Bar component CVE-2026-100821: Site isolation issue in the Panning and Zooming component Checksums-Sha1: 21f7f7330a296da54df09226ffd56af04fe1ac93 8632280 thunderbird-dbgsym_140.17.0esr-1~deb13u1_i386.deb 0c9704fd421f14107fc44f11791b2a8e4bb528c5 21353 thunderbird_140.17.0esr-1~deb13u1_i386-buildd.buildinfo cb06d9386f4edf3669f0a4868c96a68930892f95 74274736 thunderbird_140.17.0esr-1~deb13u1_i386.deb Checksums-Sha256: 44eddbab85fb97df0ab338331c7a8131e1821e936fa06b84851d5243adf72a5f 8632280 thunderbird-dbgsym_140.17.0esr-1~deb13u1_i386.deb 9aae79cec992790af5e3c4827213c0f2f4091447065e26dcea678aa4ab732423 21353 thunderbird_140.17.0esr-1~deb13u1_i386-buildd.buildinfo 52345914d7b238406fae0a3f6c2abfa33c85487243326984c6b53d279f6a76e7 74274736 thunderbird_140.17.0esr-1~deb13u1_i386.deb Files: 90cd5eda08f232d6d6c13f17c88739ea 8632280 debug optional thunderbird-dbgsym_140.17.0esr-1~deb13u1_i386.deb 518a0e5129abd9f0ff9f80530b07e61a 21353 mail optional thunderbird_140.17.0esr-1~deb13u1_i386-buildd.buildinfo a4f20200af227ec3380755f634d0da97 74274736 mail optional thunderbird_140.17.0esr-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmq+MWMACgkQPkCWRKsh 20dbaw/+PAoHA5VOeT0JNFMvXNBbzGPBzUWXbuh+KDwKaC75dUUDPYJwUiPfeTH9 27coHhtdDqABPxyDU8DrmTf4ggw9tSM/NkLswEOZeajsPWoLLdHSV/mQG8JjJ97E j9l6C8qyvwwRw8i9YAjgY4KcJ2lDY5ADDv3Ksno6zToe2HRWxqEvJrTlkd+awzh8 RSaUq1/UakO5x/OlTbLqn/5S7c3SNTDn3jlhdImPkdVI/WDl7r7JYKh5xQ1eqvA8 S+UBXXt4gn4eoChLaQCzwM4kulqzHm77znWznPLbCKTIfFgXoAFRUPEmUdrrl0Q5 58eFP9ApF6WJnY+mjovsfpCSwOcOGttUPSVV4A1m/xbTwi6OWkjxuxxfmq+gL/B6 aIZPDlWb2Q4VhCC6iZOV19aUlxuyizy8zfYOjMruXyC6zM6kAEr1HIqNX01aZI2X fMSpj0+RryusslvLk0mzmELt7crbMRYw2bP7xwMHhDY5o4SkfEliHpqBagf1/VDz 5ZfYi72AQuTv/WOQoc/1aNl2vxekpDQyrhYAoARZx+JrTshqFzwWPysJ8CK2KaBm iVFGxE7vwosAY1K8M40ImXcAdcMmm6Yz+LjhK0t/qpcJEZTzbYCzoaTz/mGihKtx GsIIXyr/IbYAM+FL7FJHzht/6+vRi8vF3hZVhuhY4WsaxDG8Ax8= =wmf6 -----END PGP SIGNATURE-----