-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 21:02:12 -0400 Source: thunderbird Binary: thunderbird thunderbird-dbgsym Architecture: amd64 Version: 1:140.17.0esr-1~deb13u1 Distribution: trixie-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Christoph Goehre Description: thunderbird - mail/news client with RSS, chat and integrated spam filter suppor Changes: thunderbird (1:140.17.0esr-1~deb13u1) trixie-security; urgency=medium . * [59b44f0] New upstream version 140.17.0esr Fixed CVE issues in upstream version 140.17 (MFSA 2026-102): CVE-2026-103500: Heap buffer overflow opening large email CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component CVE-2026-100757: Use-after-free in the Widget component CVE-2026-100758: Sandbox escape in the DOM: Navigation component CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-100766: Information disclosure in the Networking: JAR component CVE-2026-100767: Use-after-free in the Networking: Cache component CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component CVE-2026-100771: Undefined behavior in the DOM: Streams component CVE-2026-100772: Use-after-free in the DOM: Core & HTML component CVE-2026-100773: Use-after-free in the Storage: IndexedDB component CVE-2026-100774: Use-after-free in the DOM: Core & HTML component CVE-2026-100775: Sandbox escape in the Graphics component CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component CVE-2026-100779: Use-after-free in the XSLT component CVE-2026-100780: Use-after-free in the DOM: Core & HTML component CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component CVE-2026-100783: Uninitialized memory in the Audio/Video component CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component CVE-2026-100785: Use-after-free in the DOM: Core & HTML component CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component CVE-2026-100790: Use-after-free in the XSLT component CVE-2026-100791: Use-after-free in the DOM: Core & HTML component CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component CVE-2026-96869: Information disclosure in the Networking component CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component CVE-2026-100801: Privilege escalation in the DLL Services component CVE-2026-100803: Same-origin policy bypass in the WebExtensions component CVE-2026-100807: Privilege escalation in the DOM: Service Workers component CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component CVE-2026-100820: Privilege escalation in the Address Bar component CVE-2026-100821: Site isolation issue in the Panning and Zooming component Checksums-Sha1: 8eea92c900cb07cf875bdc389da74ef002516df6 531507952 thunderbird-dbgsym_140.17.0esr-1~deb13u1_amd64.deb 74df1702c2c338aa2a1eac0f47887d2adcb35b25 21440 thunderbird_140.17.0esr-1~deb13u1_amd64-buildd.buildinfo 6d708f3147c974dd88453990516799cb967ff50a 70226236 thunderbird_140.17.0esr-1~deb13u1_amd64.deb Checksums-Sha256: 7dd80d9da9a5058801191ac3aa4901063c89e0dab00df0949b70e290671213da 531507952 thunderbird-dbgsym_140.17.0esr-1~deb13u1_amd64.deb d9a51fc2f58d2b5d25adb5932225f5b97c6715463c6a7af5523fceeb3833d43f 21440 thunderbird_140.17.0esr-1~deb13u1_amd64-buildd.buildinfo ef46319ef6397741c43d276e3779630c994e67ea6f165cf2145148304389c5df 70226236 thunderbird_140.17.0esr-1~deb13u1_amd64.deb Files: 5681617c86d79dc174eee09e2888dca8 531507952 debug optional thunderbird-dbgsym_140.17.0esr-1~deb13u1_amd64.deb 30851ddada9b2fd7c1700d606bfe3d9a 21440 mail optional thunderbird_140.17.0esr-1~deb13u1_amd64-buildd.buildinfo 2e1c4d36bb437ec3c4b1a2cb46e6ccc5 70226236 mail optional thunderbird_140.17.0esr-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmq+IBUACgkQPkCWRKsh 20ckIA//RxE4LE4IQ7zv5UX6a+m/+5QwXgX3QHhHEYDxVO/p7I96gTItanrNngrW MSKAbq1V8DrpQEG3Z2IQrOggMWaocmEEnGzRB8JvDv1UyuJC7Cy55VhXW0wBTZ0H OJBnOrzPrcAXGL1nYIAFH66lkhRILivzntRIfQJAHXZ/6DROkIYNiNL6AMWAFyZ9 A1cuWx3pWr4D56BzJYyKtfPBsnc2M4Sq17L3eqP4Wmy9+Grziu+mBPGaE482+AZQ cNouWtYUWEYiD2HKANanK5BvtZqzVqs6R2Cphu+GE/V3lgb5XNV2OBQW+tF8w2N1 GjfTARMICVeb4/USP8jk+r2UUZoLSBxzLmzuMfakVN7mUlh2n7+ES5PTQFkpQz+H Fu3pfSiFO1x3dzO2/Ky7KDYLc9tIypHZuNClvGeqMJSpg98/8qZrSkuWRqyXGS/x wdRHpaaCDQQwuri/P7RnV1S5fiM7l7MYdcNfqQUodTF357U3lk8oWmrZGVjUa0p2 8lbcSUmfmF0ZmGLyLZcJcXO7X7jCD2+7/rHGfJitjfv3XHCDRF5I8MG/nux406eu OkzmZ7YfEQ7IHtocwOTmFH8roVIA04RvVdtMiD391mAarhAuXvG+ovMkj+Hze7hw iT1FJuyXF4YYos223MEUGpg9eo+/os/7c2xqdedOPm2OJfYOO0w= =OHLw -----END PGP SIGNATURE-----