Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ca29e593 by Salvatore Bonaccorso at 2026-09-30T23:16:41+02:00
Add new thunderbird issues from mfsa2026-103
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -647,7 +647,8 @@ CVE-2026-10739 (Cato Networks SDP Client for Windows before
6.12.6 allows a loca
CVE-2026-10726 (Cato Windows SDP Client before version 6.12.6 contains an
arbitrary fi ...)
NOT-FOR-US: Cato
CVE-2026-103500 (An attacker could cause a heap buffer overflow by getting a
user to op ...)
- TODO: check
+ - thunderbird <unfixed>
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-103500
CVE-2026-103476 (yii2-starter-kit through 4.2.0 fails to validate article
publication s ...)
NOT-FOR-US: yii2-starter-kit
CVE-2026-103475 (yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii
modules t ...)
@@ -1909,32 +1910,42 @@ CVE-2026-100756 (Incorrect boundary conditions in the
Audio/Video: Playback comp
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100756
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100756
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100756
CVE-2026-100757 (Use-after-free in the Widget component. This vulnerability
was fixed i ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100757
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100757
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100757
CVE-2026-100758 (Sandbox escape in the DOM: Navigation component. This
vulnerability wa ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100758
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100758
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100758
CVE-2026-100759 (Uninitialized memory in the Storage: Quota Manager component.
This vul ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100759
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100759
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100759
CVE-2026-100760 (Sandbox escape in the Security: Process Sandboxing component.
This vul ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100760
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100760
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100760
CVE-2026-100761 (Privilege escalation due to use-after-free in the Graphics:
WebGPU com ...)
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100761
@@ -1942,8 +1953,10 @@ CVE-2026-100762 (Sandbox escape due to use-after-free in
the DOM: Content Proces
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100762
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100762
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100762
CVE-2026-100763 (Incorrect boundary conditions in the Graphics: WebGPU
component. This ...)
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100763
@@ -1954,20 +1967,26 @@ CVE-2026-100765 (Use-after-free in the JavaScript:
WebAssembly component. This v
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100765
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100765
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100765
CVE-2026-100766 (Information disclosure in the Networking: JAR component. This
vulnerab ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100766
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100766
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100766
CVE-2026-100767 (Use-after-free in the Networking: Cache component. This
vulnerability ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100767
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100767
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100767
CVE-2026-100768 (Use-after-free in the Graphics: WebGPU component. This
vulnerability w ...)
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100768
@@ -1975,146 +1994,194 @@ CVE-2026-100769 (Use-after-free in the JavaScript:
WebAssembly component. This v
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100769
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100769
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100769
CVE-2026-100770 (Sandbox escape due to use-after-free in the DOM: Content
Processes com ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100770
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100770
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100770
CVE-2026-100771 (Undefined behavior in the DOM: Streams component. This
vulnerability w ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100771
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100771
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100771
CVE-2026-100772 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100772
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100772
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100772
CVE-2026-100773 (Use-after-free in the Storage: IndexedDB component. This
vulnerability ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100773
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100773
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100773
CVE-2026-100774 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100774
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100774
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100774
CVE-2026-100775 (Sandbox escape in the Graphics component. This vulnerability
was fixed ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100775
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100775
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100775
CVE-2026-100776 (Use-after-free in the JavaScript: WebAssembly component. This
vulnerab ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100776
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100776
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100776
CVE-2026-100777 (Use-after-free in the Graphics: Canvas2D component. This
vulnerability ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100777
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100777
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100777
CVE-2026-100778 (Sandbox escape due to use-after-free in the DOM: Core & HTML
component ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100778
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100778
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100778
CVE-2026-100779 (Use-after-free in the XSLT component. This vulnerability was
fixed in ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100779
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100779
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100779
CVE-2026-100780 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100780
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100780
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100780
CVE-2026-100781 (Sandbox escape due to incorrect boundary conditions in the
Graphics: W ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100781
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100781
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100781
CVE-2026-100782 (Privilege escalation due to incorrect boundary conditions in
the Graph ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100782
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100782
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100782
CVE-2026-100783 (Uninitialized memory in the Audio/Video component. This
vulnerability ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100783
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100783
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100783
CVE-2026-100784 (Use-after-free in the Layout: Text and Fonts component. This
vulnerabi ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100784
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100784
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100784
CVE-2026-100785 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100785
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100785
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100785
CVE-2026-100786 (Sandbox escape due to use-after-free in the Graphics
component. This v ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100786
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100786
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100786
CVE-2026-100787 (Sandbox escape in the XUL component. This vulnerability was
fixed in F ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100787
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100787
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100787
CVE-2026-100788 (Invalid pointer in the JavaScript: WebAssembly component.
This vulnera ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100788
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100788
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100788
CVE-2026-100789 (Use-after-free in the Graphics: Canvas2D component. This
vulnerability ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100789
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100789
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100789
CVE-2026-100790 (Use-after-free in the XSLT component. This vulnerability was
fixed in ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100790
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100790
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100790
CVE-2026-100791 (Use-after-free in the DOM: Core & HTML component. This
vulnerability w ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100791
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100791
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100791
CVE-2026-100792 (JIT miscompilation in the JavaScript: WebAssembly component.
This vuln ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100792
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100792
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100792
CVE-2026-100793 (JIT miscompilation in the JavaScript Engine component. This
vulnerabil ...)
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100793
@@ -2122,14 +2189,18 @@ CVE-2026-100794 (Sandbox escape due to incorrect
boundary conditions in the Inte
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100794
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100794
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100794
CVE-2026-96869 (Information disclosure in the Networking component. This
vulnerability ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-96869
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-96869
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-96869
CVE-2026-100795 (Denial-of-service in the Networking component. This
vulnerability was ...)
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100795
@@ -2140,14 +2211,18 @@ CVE-2026-100797 (Privilege escalation due to
use-after-free in the Graphics: Web
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100797
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100797
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100797
CVE-2026-100798 (Cryptography misuse in Storage: Quota Manager component. This
vulnerab ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100798
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100798
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100798
CVE-2026-100799 (Uninitialized memory in the Graphics: WebGPU component. This
vulnerabi ...)
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100799
@@ -2155,14 +2230,18 @@ CVE-2026-100800 (Sandbox escape due to use-after-free
in the Disability Access A
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100800
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100800
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100800
CVE-2026-100801 (Privilege escalation in the DLL Services component. This
vulnerability ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100801
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100801
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100801
CVE-2026-100802 (Uninitialized memory in the Graphics: WebGPU component. This
vulnerabi ...)
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100802
@@ -2170,8 +2249,10 @@ CVE-2026-100803 (Same-origin policy bypass in the
WebExtensions component. This
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100803
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100803
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100803
CVE-2026-100804 (Sandbox escape due to use-after-free in the Preferences:
Backend compo ...)
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100804
@@ -2182,26 +2263,34 @@ CVE-2026-100806 (Uninitialized memory in the Graphics:
WebGPU component. This vu
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100806
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100806
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100806
CVE-2026-100807 (Privilege escalation in the DOM: Service Workers component.
This vulne ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100807
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100807
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100807
CVE-2026-100808 (Mitigation bypass in the DOM: Service Workers component. This
vulnerab ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100808
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100808
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100808
CVE-2026-100809 (Same-origin policy bypass in the DevTools component. This
vulnerabilit ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100809
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100809
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100809
CVE-2026-100810 (Other issue in the DevTools component. This vulnerability was
fixed in ...)
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100810
@@ -2209,14 +2298,18 @@ CVE-2026-100811 (Sandbox escape due to use-after-free
in the DOM: Core & HTML co
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100811
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100811
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100811
CVE-2026-100812 (Denial-of-service in the Graphics component. This
vulnerability was fi ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100812
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100812
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100812
CVE-2026-100813 (Invalid pointer in the JavaScript Engine: JIT component. This
vulnerab ...)
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100813
@@ -2224,20 +2317,26 @@ CVE-2026-100814 (Incorrect boundary conditions in the
JavaScript Engine: JIT com
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100814
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100814
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100814
CVE-2026-100815 (Use-after-free in the CSS Parsing and Computation component.
This vuln ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100815
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100815
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100815
CVE-2026-100816 (Site isolation issue in the DOM: Networking component. This
vulnerabil ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100816
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100816
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100816
CVE-2026-100817 (Other issue in the JavaScript: WebAssembly component. This
vulnerabili ...)
- firefox 157.0-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100817
@@ -2245,32 +2344,42 @@ CVE-2026-100818 (Sandbox escape due to use-after-free
in the Widget: Gtk compone
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100818
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100818
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100818
CVE-2026-100819 (Sandbox escape due to incorrect boundary conditions in the
XPCOM compo ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100819
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100819
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100819
CVE-2026-100820 (Privilege escalation in the Address Bar component. This
vulnerability ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100820
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100820
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100820
CVE-2026-100821 (Site isolation issue in the Panning and Zooming component.
This vulner ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100821
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100821
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100821
CVE-2026-100822 (Spoofing issue in the Networking: HTTP component. This
vulnerability w ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100822
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100822
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100822
CVE-2026-100823 (Spoofing issue in the Downloads component in Firefox for
Android. This ...)
- firefox <not-affected> (Only affects Firefox on Android)
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100823
@@ -2278,48 +2387,64 @@ CVE-2026-100824 (Privilege escalation in the Places
component. This vulnerabilit
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100824
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100824
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100824
CVE-2026-100825 (Use-after-free in the JavaScript Engine: JIT component. This
vulnerabi ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100825
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100825
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100825
CVE-2026-100826 (Denial-of-service in the Storage: StorageManager component.
This vulne ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100826
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100826
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100826
CVE-2026-100828 (Mitigation bypass in the Bookmarks & History component. This
vulnerabi ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100828
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100828
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100828
CVE-2026-100829 (Mitigation bypass in the DOM: Security component. This
vulnerability w ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100829
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100829
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100829
CVE-2026-100830 (Mitigation bypass in the DOM: Navigation component. This
vulnerability ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100830
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100830
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100830
CVE-2026-100831 (Use-after-free in the DOM: UI Events & Focus Handling
component. This ...)
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100831
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100831
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100831
CVE-2026-100832 (Use-after-free in the Graphics: Canvas2D component. This
vulnerability ...)
{DSA-6533-1}
- firefox-esr 153.4.0esr-1
+ - thunderbird <unfixed>
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100832
+ NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100832
CVE-2026-84782 (Issue summary: The DTLS retransmission logic does not
correctly handle ...)
{DSA-6531-1}
- openssl 3.6.5-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ca29e593025a355aef713bf78c2afa782a15fc80
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ca29e593025a355aef713bf78c2afa782a15fc80
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
