Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d1f9dced by Salvatore Bonaccorso at 2025-12-11T20:20:12+01:00
Track fixed version for thunderbird issues fixed via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1596,7 +1596,7 @@ CVE-2025-14333 (Memory safety bugs present in Firefox ESR
140.5, Thunderbird ESR
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14333
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14333
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14333
@@ -1607,7 +1607,7 @@ CVE-2025-14331 (Same-origin policy bypass in the Request
Handling component. Thi
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14331
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14331
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14331
@@ -1615,7 +1615,7 @@ CVE-2025-14330 (JIT miscompilation in the JavaScript
Engine: JIT component. This
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14330
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14330
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14330
@@ -1623,7 +1623,7 @@ CVE-2025-14329 (Privilege escalation in the Netmonitor
component. This vulnerabi
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14329
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14329
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14329
@@ -1631,7 +1631,7 @@ CVE-2025-14328 (Privilege escalation in the Netmonitor
component. This vulnerabi
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14328
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14328
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14328
@@ -1645,7 +1645,7 @@ CVE-2025-14325 (JIT miscompilation in the JavaScript
Engine: JIT component. This
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14325
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14325
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14325
@@ -1653,7 +1653,7 @@ CVE-2025-14324 (JIT miscompilation in the JavaScript
Engine: JIT component. This
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14324
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14324
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14324
@@ -1661,7 +1661,7 @@ CVE-2025-14323 (Privilege escalation in the DOM:
Notifications component. This v
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14323
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14323
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14323
@@ -1669,7 +1669,7 @@ CVE-2025-14322 (Sandbox escape due to incorrect boundary
conditions in the Graph
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14322
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14322
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14322
@@ -1677,7 +1677,7 @@ CVE-2025-14321 (Use-after-free in the WebRTC: Signaling
component. This vulnerab
{DSA-6078-1}
- firefox 146.0-1
- firefox-esr 140.6.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:140.6.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14321
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-94/#CVE-2025-14321
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2025-96/#CVE-2025-14321
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d1f9dcedf4cf5564ed413fe0706cf7088969b5f0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d1f9dcedf4cf5564ed413fe0706cf7088969b5f0
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
