-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 31 Oct 2026 06:50:30 +0200 Source: thunderbird Architecture: source Version: 1:159.0-1 Distribution: experimental Urgency: medium Maintainer: Carsten Schoenert <[email protected]> Changed-By: Carsten Schoenert <[email protected]> Changes: thunderbird (1:159.0-1) experimental; urgency=medium . * [36df804] New upstream version 159.0 Fixed CVE issues in upstream version 159 (MFSA 2026-121): CVE-2026-118174: Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment CVE-2026-118175: Content of other messages could be included when replying to a crafted message CVE-2026-118176: Bypass of remote UNC path restriction in mailbox: URLs CVE-2026-118177: Calendar discovery accepted local file and remote network share locations CVE-2026-118178: RSS feed could redirect its subscription to a local file or network share CVE-2026-118179: Request forgery via news: links CVE-2026-118180: Matrix homeserver could redirect the chat session to a local file or network share CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation component CVE-2026-117861: Sandbox escape in the DOM: Navigation component CVE-2026-117862: Privilege escalation due to incorrect boundary conditions in the Networking component CVE-2026-117863: Information disclosure due to uninitialized memory in the Audio/Video component CVE-2026-117864: Sandbox escape in the Form Manager component CVE-2026-117865: Use-after-free in the JavaScript: GC component CVE-2026-117866: Privilege escalation due to use-after-free in the Graphics: Canvas2D component CVE-2026-117867: Use-after-free in the Layout component CVE-2026-117868: Sandbox escape in the DOM: Networking component CVE-2026-117869: Use-after-free in the DOM: Core & HTML component CVE-2026-117870: Use-after-free in the JavaScript Engine component CVE-2026-117871: Invalid pointer in the Graphics component CVE-2026-117872: Use-after-free in the JavaScript: Standard Library component CVE-2026-117873: Incorrect boundary conditions in the Audio/Video: Playback component CVE-2026-118005: Use-after-free in the WebRTC: Signaling component CVE-2026-117874: Use-after-free in the Internationalization component CVE-2026-117875: Use-after-free in the Layout: Scrolling and Overflow component CVE-2026-117876: Use-after-free in the Layout: Text and Fonts component CVE-2026-118006: Privilege escalation due to use-after-free in the WebRTC: Signaling component CVE-2026-117877: Use-after-free in the Layout: Text and Fonts component CVE-2026-118007: Use-after-free in the JavaScript: GC component CVE-2026-117878: Other issue, use-after-free in the Storage: IndexedDB component CVE-2026-117879: Incorrect boundary conditions in the Layout: Tables component CVE-2026-118008: Privilege escalation in the DOM: Navigation component CVE-2026-117880: Use-after-free in the XML component CVE-2026-118009: Integer overflow, use-after-free in the Graphics: Text component CVE-2026-117881: Use-after-free in the DOM: Core & HTML component CVE-2026-117882: Use-after-free in the Layout component CVE-2026-117883: Use-after-free in the DOM: HTML Parser component CVE-2026-117884: Use-after-free in the Networking component CVE-2026-117885: Use-after-free in the Layout: Grid component CVE-2026-117886: Incorrect boundary conditions in the Graphics: Text component CVE-2026-117887: Use-after-free in the DOM: Core & HTML component CVE-2026-118010: Use-after-free in the Disability Access APIs component CVE-2026-117888: Uninitialized memory in the Graphics: Canvas2D component CVE-2026-117889: Incorrect boundary conditions in the JavaScript Engine component CVE-2026-117890: JIT miscompilation in the JavaScript Engine: JIT component CVE-2026-117891: Use-after-free in the JavaScript Engine: JIT component CVE-2026-117892: Privilege escalation due to use-after-free in the WebRTC: Networking component CVE-2026-117893: Incorrect boundary conditions in the Security: PSM component CVE-2026-117894: Incorrect boundary conditions in the WebRTC: Signaling component CVE-2026-117895: Use-after-free in the DOM: Core & HTML component CVE-2026-117896: Use-after-free in the DOM: Core & HTML component CVE-2026-117897: Incorrect boundary conditions in the Layout: Tables component CVE-2026-117898: Use-after-free in the JavaScript Engine: JIT component CVE-2026-117899: Use-after-free in the Networking: HTTP component CVE-2026-117900: Use-after-free in the DOM: Editor component CVE-2026-117901: Use-after-free in the DOM: Core & HTML component CVE-2026-117902: Use-after-free in the Layout: Text and Fonts component CVE-2026-117903: Use-after-free in the Audio/Video component CVE-2026-117904: Use-after-free in the JavaScript: GC component CVE-2026-117905: Use-after-free in the Audio/Video: Playback component CVE-2026-117906: Use-after-free in the CSS Parsing and Computation component CVE-2026-117907: Use-after-free in the Networking component CVE-2026-117908: Use-after-free in the Graphics: ImageLib component CVE-2026-117909: Use-after-free in the JavaScript: GC component CVE-2026-117910: Invalid pointer in the JavaScript Engine component CVE-2026-117911: Use-after-free in the Audio/Video: Playback component CVE-2026-117912: Same-origin policy bypass in the CSS Parsing and Computation component CVE-2026-117913: Use-after-free in the SVG component CVE-2026-117914: Use-after-free in the SVG component CVE-2026-117915: Incorrect boundary conditions in the Layout: Block and Inline component CVE-2026-117916: Use-after-free in the XSLT component CVE-2026-117917: Invalid pointer in the Graphics: WebRender component CVE-2026-117918: Use-after-free in the Graphics: Canvas2D component CVE-2026-117919: Use-after-free in the DOM: Core & HTML component CVE-2026-117920: Use-after-free in the DOM: HTML Parser component CVE-2026-117921: Use-after-free in the CSS Parsing and Computation component CVE-2026-117922: Use-after-free in the Networking: WebSockets component CVE-2026-117923: Use-after-free in the Audio/Video component CVE-2026-117924: Use-after-free in the XSLT component CVE-2026-117925: Use-after-free in the DOM: Core & HTML component CVE-2026-117926: Incorrect boundary conditions in the SVG component CVE-2026-117927: Use-after-free in the SVG component CVE-2026-117928: Same-origin policy bypass in the CSS Parsing and Computation component CVE-2026-117929: Use-after-free in the DOM: Core & HTML component CVE-2026-117930: Use-after-free in the DOM: Bindings (WebIDL) component CVE-2026-117931: Use-after-free in the DOM: Events component CVE-2026-117932: Use-after-free in the DOM: Core & HTML component CVE-2026-117933: Frame poisoning in the CSS Parsing and Computation component CVE-2026-117934: Use-after-free in the Layout component CVE-2026-118011: Frame poisoning in the CSS Parsing and Computation component CVE-2026-118012: Use-after-free in the DOM: Animation component CVE-2026-117935: Use-after-free in the DOM: Bindings (WebIDL) component CVE-2026-117936: Use-after-free in the DOM: Core & HTML component CVE-2026-117937: Invalid pointer in the JavaScript Engine component CVE-2026-117938: Use-after-free in the Layout component CVE-2026-117939: Use-after-free in the XML component CVE-2026-117940: Use-after-free in the DOM: Core & HTML component CVE-2026-118013: Use-after-free in the Layout: Images, Video, and HTML Frames component CVE-2026-117941: Use-after-free in the DOM: CSS Object Model component CVE-2026-117942: Incorrect boundary conditions in the JavaScript Engine: JIT component CVE-2026-118014: Use-after-free in the JavaScript Engine: JIT component CVE-2026-117943: Use-after-free in the DOM: Core & HTML component CVE-2026-117944: Use-after-free in the Layout component CVE-2026-118015: Use-after-free in the DOM: Core & HTML component CVE-2026-117945: Incorrect boundary conditions in the XML component CVE-2026-118016: Use-after-free in the DOM: Core & HTML component CVE-2026-117946: Incorrect boundary conditions in the JavaScript Engine component CVE-2026-117947: Use-after-free in the XML component CVE-2026-117948: Use-after-free in the SVG component CVE-2026-117949: Use-after-free in the DOM: Core & HTML component CVE-2026-117950: Incorrect boundary conditions in the DOM: Core & HTML component CVE-2026-117951: Use-after-free in the DOM: Core & HTML component CVE-2026-117952: Uninitialized memory in the Networking component CVE-2026-117953: Use-after-free in the DOM: Core & HTML component CVE-2026-118017: Use-after-free in the SVG component CVE-2026-117954: Use-after-free in the Layout: Positioned component CVE-2026-118019: Race condition, use-after-free in the DOM: File component CVE-2026-117955: JIT miscompilation in the JavaScript: WebAssembly component CVE-2026-100801: Privilege escalation in the DLL Services component CVE-2026-117956: Invalid pointer in the Nimbus Desktop Client component CVE-2026-117957: Cryptographic issue in the WebRTC: Networking component CVE-2026-117958: Site isolation issue in the Networking: HTTP component CVE-2026-117959: Site isolation issue in the DOM: Service Workers component CVE-2026-117960: Spoofing issue in the DOM: Core & HTML component CVE-2026-117961: Incorrect boundary conditions in the Layout: Text and Fonts component CVE-2026-117962: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component CVE-2026-117963: Incorrect boundary conditions in the DOM: Service Workers component CVE-2026-117964: Use-after-free in the Panning and Zooming component CVE-2026-117965: Same-origin policy bypass in the Address Bar component CVE-2026-117966: Site isolation issue in the Networking: HTTP component CVE-2026-117967: Mitigation bypass in the DOM: Security component CVE-2026-118020: Use-after-free in the Layout component CVE-2026-117968: Use-after-free in the DOM: Core & HTML component CVE-2026-117969: Invalid pointer in the JavaScript Engine: JIT component CVE-2026-117970: Race condition in the Disability Access APIs component CVE-2026-117971: Sandbox escape due to use-after-free in the Print Preview component CVE-2026-117972: Use-after-free in the Graphics component CVE-2026-118021: Sandbox escape due to use-after-free in the XPCOM component CVE-2026-117973: Use-after-free in the Networking: DNS component CVE-2026-117974: Use-after-free in the XML component CVE-2026-117975: Sandbox escape due to invalid pointer in the Graphics: WebRender component CVE-2026-117976: Site isolation issue in the DOM: Navigation component CVE-2026-117977: Other issue in the Console component CVE-2026-117978: Incorrect boundary conditions in the Graphics component CVE-2026-117979: Incorrect boundary conditions in the Graphics: WebRender component CVE-2026-117980: Use-after-free in the Graphics component CVE-2026-117981: Privilege escalation in the Toolkit component CVE-2026-117982: Invalid pointer in the JavaScript Engine: JIT component CVE-2026-117983: Use-after-free in the Graphics component CVE-2026-118022: Sandbox escape due to use-after-free in the Disability Access APIs component CVE-2026-117984: Incorrect boundary conditions in the Layout: Scrolling and Overflow component CVE-2026-117985: Sandbox escape due to use-after-free in the Graphics component CVE-2026-117986: Use-after-free in the Graphics component CVE-2026-117987: Use-after-free in the Graphics component CVE-2026-117988: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-117989: Use-after-free in the Graphics component CVE-2026-118023: Sandbox escape due to use-after-free in the Graphics: WebRender component CVE-2026-117990: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component CVE-2026-117991: Incorrect boundary conditions in the Layout: Text and Fonts component CVE-2026-117992: Information disclosure in the CSS Parsing and Computation component CVE-2026-117993: Integer overflow in the Graphics: Text component CVE-2026-117994: Use-after-free in the JavaScript: GC component CVE-2026-117995: Privilege escalation in the DOM: UI Events & Focus Handling component CVE-2026-117996: Incorrect boundary conditions in the WebRTC component CVE-2026-117997: Sandbox escape due to use-after-free in the Widget component CVE-2026-118024: Use-after-free in the Graphics: Text component CVE-2026-118025: Other issue in the SVG component CVE-2026-117998: Mitigation bypass in the DOM: Push Subscriptions component CVE-2026-117999: Race condition in the IPC component CVE-2026-118000: Information disclosure in the Networking: HTTP component CVE-2026-118002: Information disclosure due to race condition in the Networking component CVE-2026-118003: Information disclosure in the Networking: DNS component CVE-2026-118026: Invalid pointer in the JavaScript: GC component CVE-2026-118004: Incorrect boundary conditions in the CSS Transitions and Animations component * [faee53c] Rebuild patch queue from patch-queue branch Adjusted patches: debian-hacks/Allow-to-override-rust-LTO-flag.patch thunderbird-l10n/sl-change-Edit-Uredi-to-CTRL-E.patch . [ Jeremy Bícha ] * [70b48ed] Remove obsolete Build-Depends: libidl-dev Checksums-Sha1: 122579754b3219e8f66628c44bf3dfc82d5b5bee 8379 thunderbird_159.0-1.dsc 9e424a74133a8404a58d127bbd5be3449b7f4735 12689820 thunderbird_159.0.orig-thunderbird-l10n.tar.xz 47ae00cb91919f6eec74b9a44866872f5a51d4e0 925269276 thunderbird_159.0.orig.tar.xz 5247f27a722ea0a802887df74ba74be629c0ac0d 541700 thunderbird_159.0-1.debian.tar.xz 9b25009dfc645f1fb4bc626c1168842106543b1c 40145 thunderbird_159.0-1_amd64.buildinfo Checksums-Sha256: be079bb1ea6d0a7f1996d8e4bc005fc4825346e67d576486c7c2112f724b9330 8379 thunderbird_159.0-1.dsc 78958772d0fa4ed0ae35a608a99ee1b7d7b266f46d4f2a512fe23c6c9eb0ad1f 12689820 thunderbird_159.0.orig-thunderbird-l10n.tar.xz 1c9bff50937293db9aa51dff5c0668e33b398fdbcd5b7a72fc0a749fe04b23c3 925269276 thunderbird_159.0.orig.tar.xz b2411e5979d5acd8c2e2ae7d34cd850cd256bc75d13664c020063350301e414f 541700 thunderbird_159.0-1.debian.tar.xz 04ac9dd7902e821120ac3cbf38c0fd78f4866c581652f93a4b8606ca732284c4 40145 thunderbird_159.0-1_amd64.buildinfo Files: f3840ce0b3b2566ced91abe85142fb34 8379 mail optional thunderbird_159.0-1.dsc 3f399679b9a43d67c476041377d37a82 12689820 mail optional thunderbird_159.0.orig-thunderbird-l10n.tar.xz 813358f8cec14363881f2dd0ae2a585e 925269276 mail optional thunderbird_159.0.orig.tar.xz 487b4e486eff019b2e452bcc7769a664 541700 mail optional thunderbird_159.0-1.debian.tar.xz 82f112fd412f7fc6fe34082a594319e4 40145 mail optional thunderbird_159.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmrm47sACgkQgwFgFCUd HbD3zxAAqflD47vbPqeRTw9ZpyWZFq1RYF6hpZZNv5K2Eeme8aA8JUeOuffhzOhb ZkRhhoN2hXKWGmveMAUsU8L2/KvJyf6QMjOQJXp12mqBfhJYpnwaLildCN/sKiAl k5HoOC8RpsxRUINIDlX9lBewUGbiopZ7xDscpd31e7uC+jIEyNk0cl817FvsgWcT K7/4TlW1ZjFcUEmz99iag8ssarCnCEdyAwLg9XuS9hsJ3rkLRAu2cB7iJS/4Qtzl 5Lax0sctGyTxAtt0wUWCIQMclgCVaeeVzC5uJqP7LMf5QYKtnNT2/4KTX6J6+H2s izMG6vD7H94xIeQkS+LhcWqTVjIkeOQGjWMJ8KCziPQvCfvYy54YGU14ToN+vXAg 1mWdCBP2F3BHGRUDgixY0/unv9bwYiP/aHmjDtO0DQJfjp6JETOFoV7G8djaeos8 FZxSEjlDP5hos4EyPBttFXA3P8NtDqaB/xNGimZGOkDXEO3z84fdaVm0qR3w1wK8 RnOQCzuVhn7mgUBEHxGbIm57CWIovOM4oJcts38DyWX5peFx9Fuj71KfFOKU7WT3 Esq945pHlnUHR1TBu1D7rGK6BfuZ+GnNpNKN2GrTAzaAS3MxCi3BrVCFn4bUAoAP coxgioDWV1N7K1Xm6DD14ubzCmoYVGI6OUEoeBZ2f51UKwoAnhQ= =mkDF -----END PGP SIGNATURE-----
pgpk5AhnhNpJS.pgp
Description: PGP signature
