Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
81f27d19 by Moritz Muehlenhoff at 2025-03-06T19:56:13+01:00
thunderbird fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -531,7 +531,7 @@ CVE-2025-1938 (Memory safety bugs present in Firefox 135,
Thunderbird 135, Firef
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1938
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1938
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1938
@@ -539,7 +539,7 @@ CVE-2025-1937 (Memory safety bugs present in Firefox 135,
Thunderbird 135, Firef
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1937
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1937
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1937
@@ -547,7 +547,7 @@ CVE-2025-1936 (jar: URLs retrieve local file content
packaged in a ZIP archive.
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1936
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1936
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1936
@@ -555,7 +555,7 @@ CVE-2025-1935 (A web page could trick a user into setting
that site as the defau
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1935
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1935
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1935
@@ -569,7 +569,7 @@ CVE-2025-1934 (It was possible to interrupt the processing
of a RegExp bailout a
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1934
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1934
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1934
@@ -580,7 +580,7 @@ CVE-2025-1933 (On 64-bit CPUs, when the JIT compiles WASM
i32 return values they
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1933
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1933
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1932
@@ -588,7 +588,7 @@ CVE-2025-1932 (An inconsistent comparator in
xslt/txNodeSorter could have result
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1932
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1932
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1932
@@ -596,7 +596,7 @@ CVE-2025-1931 (It was possible to cause a use-after-free in
the content process
{DSA-5874-1}
- firefox 136.0-1
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-14/#CVE-2025-1931
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2025-1931
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2025-1931
@@ -21108,7 +21108,7 @@ CVE-2024-43762 (In multiple locations, there is a
possible way to avoid unbindin
CVE-2024-43097 (In resizeToAtLeast of SkRegion.cpp, there is a possible out of
bounds ...)
{DSA-5874-1}
- firefox-esr 128.8.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:128.8.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-16/#CVE-2024-43097
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/#CVE-2024-43097
CVE-2024-43077 (In DevmemValidateFlags of devicemem_server.c , there is a
possible out ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81f27d19df468f209d532930a4618913b2d46387
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81f27d19df468f209d532930a4618913b2d46387
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
