-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 02 Sep 2026 09:10:45 -0400
Source: thunderbird
Binary: thunderbird thunderbird-dbgsym
Architecture: riscv64
Version: 1:140.15.0esr-1~deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-manda-04) <buildd_riscv64-rv-manda-04@buildd.debian.org>
Changed-By: Christoph Goehre <chris@sigxcpu.org>
Description:
 thunderbird - mail/news client with RSS, chat and integrated spam filter suppor
Changes:
 thunderbird (1:140.15.0esr-1~deb13u1) trixie-security; urgency=medium
 .
   * [4095154] New upstream version 140.15.0esr
     Fixed CVE issues in upstream version 140.15 (MFSA 2026-87):
     CVE-2026-84639: Uninitialized memory in MIME parsing
     CVE-2026-84640: One byte overflow read in mail parser
     CVE-2026-84641: Information disclosure due to malicious IMAP server
                     response
     CVE-2026-75874: Sandbox escape in the Remote Settings Client component
     CVE-2026-16365: Privilege escalation in the DOM: Workers component
     CVE-2026-84119: Sandbox escape due to use-after-free in the DOM:
                     Navigation component
     CVE-2026-84120: Use-after-free in the Audio/Video component
     CVE-2026-84121: Sandbox escape due to use-after-free in the DOM: Security
                     component
     CVE-2026-84122: Use-after-free in the Audio/Video component
     CVE-2026-84124: Use-after-free in the DOM: Core &amp; HTML component
     CVE-2026-16371: Privilege escalation in the DOM: Navigation component
     CVE-2026-84131: Privilege escalation due to invalid pointer in the
                     Graphics component
     CVE-2026-84143: Internally found bugs fixed in Thunderbird 155,
                     Thunderbird ESR 153.2 and Thunderbird ESR 140.15
     CVE-2026-84145: Internally found bugs fixed in Thunderbird 155,
                     Thunderbird ESR 153.2 and Thunderbird ESR 140.15
Checksums-Sha1:
 994db99f0f7030b3c928bb1c33680a77d0462b95 8579184 thunderbird-dbgsym_140.15.0esr-1~deb13u1_riscv64.deb
 d9446bb77fc8c114e4f28eebe364e3642f53549d 21325 thunderbird_140.15.0esr-1~deb13u1_riscv64-buildd.buildinfo
 82daeba58f1893f7e4ae8f905021549d257f4bcc 65863952 thunderbird_140.15.0esr-1~deb13u1_riscv64.deb
Checksums-Sha256:
 f4e52cdd62e3a76952673c2c566217060462aec119463247a0c601102dafc825 8579184 thunderbird-dbgsym_140.15.0esr-1~deb13u1_riscv64.deb
 38e744cf627d2c5e20d21a639d8a7e686fc8f8c48527030ad19484561611ecc7 21325 thunderbird_140.15.0esr-1~deb13u1_riscv64-buildd.buildinfo
 195d005ac5ad54a5f900ad9788e58bdde31ddd0641162fe302bea1942198c7d3 65863952 thunderbird_140.15.0esr-1~deb13u1_riscv64.deb
Files:
 0d59603d75dfea9445dd82a164a2dde3 8579184 debug optional thunderbird-dbgsym_140.15.0esr-1~deb13u1_riscv64.deb
 eb17d776402dc6a80af380b20be5807b 21325 mail optional thunderbird_140.15.0esr-1~deb13u1_riscv64-buildd.buildinfo
 ab8d13551788b631954e6cc292c6dec4 65863952 mail optional thunderbird_140.15.0esr-1~deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEpWtAFYomK/29mcYCqTndZcwOQoMFAmqYz8EACgkQqTndZcwO
QoPJ3RAAmnvGtguORts79RyN+1YOhCSQ5biE1JpE4jACLao230ghb7lM0k+PUTz4
ss+Ctis/e+rpv4HlTGyZ+A2CscdcsXc6AlqOkKpEWk065+IUN6oK3fjAbi8dLzkG
/eIBo7+4PggTjX9W9MPedq/B69mibXy1tn23SsWgJOy81QFd82yj+tMpcdgJ0s9H
GeOQIpaTauOZs2Vmuj8qOL/K/N5S4FFSnwUcvffEBpUB0XbMbtcOwA/EEWOtp/eK
7xKDFOIIlBW4eKYzo+lKjfrUZkjZL67ZU0lwbmtTYYAcIs7vPTpAubYxEwFQSE9w
ll3wBeyGeafZSfz8pV7iR/7FG70ZhQ8XYeQQyw8jxehpadHYshdA4v5+GKlJwoMi
Rqp61K2ST5ZphD/rSqdQLpBJ5kVxUrcMWJhEi2i4eqRCq6F7ed1s37REuzfV50pa
uzWQIyyOlI9LO90ANLNyJjKvSrsjsxW5FZXrEeYur+rVWheikuGsJN8N93//KjwP
rEGcnw+xmwmJwkb0J0LRJCEEa4DOlPLP0veYcQTIlvcIWpUFsQ+LnVVPsRelkWp/
69qEJYxRjU1dzFfr9B3A7TGcXgP7VYHbDXZRVc9J8p2UXnO2a5/yTibpyk7nSa6B
nOCfX7BnYvdWdcloR5vO4PYCm5u0+PL3L0VBKQMsVOo8P75H128=
=gBYD
-----END PGP SIGNATURE-----