-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 21:02:12 -0400 Source: thunderbird Binary: thunderbird thunderbird-dbgsym Architecture: arm64 Version: 1:140.17.0esr-1~deb13u1 Distribution: trixie-security Urgency: medium Maintainer: arm64 Build Daemon (arm-ubc-03) Changed-By: Christoph Goehre Description: thunderbird - mail/news client with RSS, chat and integrated spam filter suppor Changes: thunderbird (1:140.17.0esr-1~deb13u1) trixie-security; urgency=medium . * [59b44f0] New upstream version 140.17.0esr Fixed CVE issues in upstream version 140.17 (MFSA 2026-102): CVE-2026-103500: Heap buffer overflow opening large email CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component CVE-2026-100757: Use-after-free in the Widget component CVE-2026-100758: Sandbox escape in the DOM: Navigation component CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-100766: Information disclosure in the Networking: JAR component CVE-2026-100767: Use-after-free in the Networking: Cache component CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component CVE-2026-100771: Undefined behavior in the DOM: Streams component CVE-2026-100772: Use-after-free in the DOM: Core & HTML component CVE-2026-100773: Use-after-free in the Storage: IndexedDB component CVE-2026-100774: Use-after-free in the DOM: Core & HTML component CVE-2026-100775: Sandbox escape in the Graphics component CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component CVE-2026-100779: Use-after-free in the XSLT component CVE-2026-100780: Use-after-free in the DOM: Core & HTML component CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component CVE-2026-100783: Uninitialized memory in the Audio/Video component CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component CVE-2026-100785: Use-after-free in the DOM: Core & HTML component CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component CVE-2026-100790: Use-after-free in the XSLT component CVE-2026-100791: Use-after-free in the DOM: Core & HTML component CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component CVE-2026-96869: Information disclosure in the Networking component CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component CVE-2026-100801: Privilege escalation in the DLL Services component CVE-2026-100803: Same-origin policy bypass in the WebExtensions component CVE-2026-100807: Privilege escalation in the DOM: Service Workers component CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component CVE-2026-100820: Privilege escalation in the Address Bar component CVE-2026-100821: Site isolation issue in the Panning and Zooming component Checksums-Sha1: dd8a79271c78e037e65bbc58c2b20c5be9d53ae4 524868548 thunderbird-dbgsym_140.17.0esr-1~deb13u1_arm64.deb 7f2c01402a0ff998a1cfc3e3df235ab46b395965 21496 thunderbird_140.17.0esr-1~deb13u1_arm64-buildd.buildinfo 689def171688367e6db495619ed8c60e4500e44f 62457452 thunderbird_140.17.0esr-1~deb13u1_arm64.deb Checksums-Sha256: 4c17e01aa1c5f78115ba6a99d222fb7a267d5822a6e8cf052390c4825ef10cb5 524868548 thunderbird-dbgsym_140.17.0esr-1~deb13u1_arm64.deb 6c6ff2cc89d62edda6f310ea7dde9c12574fabd0b1b6fcf3704c67f2b6aa1511 21496 thunderbird_140.17.0esr-1~deb13u1_arm64-buildd.buildinfo 4e9603f093e055e4dc72b9a7cea8304b471331123722557a4db49eea771c86ce 62457452 thunderbird_140.17.0esr-1~deb13u1_arm64.deb Files: 35bfaaa55fe3fa5607e2ee27bc7329e7 524868548 debug optional thunderbird-dbgsym_140.17.0esr-1~deb13u1_arm64.deb 434b1f31ed57efd16a821bd33e3ab287 21496 mail optional thunderbird_140.17.0esr-1~deb13u1_arm64-buildd.buildinfo f7a30b9c3a83584270a6363b83b062d1 62457452 mail optional thunderbird_140.17.0esr-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmq91TMACgkQvzDqKQSG l8XTvRAAsN0tBryvj2Ngw0MCplaYk25hRGLtMx9sWQGqy58q52QN3WAbFqqOUAc/ d+0xZ37zkz65Lm3+YiSlQWfKLurfLdVmPhXhfSQPYRWGL5+/7fBSPVfByf726s7F 4ebvZArEZVIazhjFRLKE0a2o6xCDw2Bsj7WBIMJQwA7qFtaQ3lWbLr1dafAlMwMQ yfMN+gGCMHem+l+MnpbO3Vmms5fshVffTBuN5xdO8C24W3ngRCsnuk1EysYB3Noi 9lu/+RxJ2E0AaddrtZGg/Wr0Msrra0IQSiTn4FGxku6w4EF3ITiO/8NJcKCHdiPI fmMMoHQfzG+ye1zRqBm7MSCdKlmD3y2ndnNTZF4kfparjTCjA3TM5SZTHyGaSc27 UV7lJf3bITlRjaD7THUdw0DaW5Ag2+hqfVYpBHqCQsmJIN+vf8vJ6y7zLmNuxCnW Gsy81iXnG8GbKIDFpfLfQkiCYEsyQ1qL6f+UCy6aYc4wJfXdYVIszaEtZBXfKi2r vteGWldXVHrHZTcu1wfPDx+iFyv5mncBeHtxkni3DqPtJyWUX73tQcavIYoWz0Hz 2D1tPjk2yAylKHdZmPMVO4S4krHPcUP4vTbhv4n3S7ngu7/9JjiSWAOa3gHZFTgV UNXFRjGfVolDlOIRWfss/S5Yn5U+roRkz4hXBRv8We043WlDWkU= =uceW -----END PGP SIGNATURE-----