Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f2db8c15 by Salvatore Bonaccorso at 2026-10-01T10:30:14+02:00
Track fixed for thunderbird via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1032,7 +1032,7 @@ CVE-2026-10739 (Cato Networks SDP Client for Windows
before 6.12.6 allows a loca
CVE-2026-10726 (Cato Windows SDP Client before version 6.12.6 contains an
arbitrary fi ...)
NOT-FOR-US: Cato
CVE-2026-103500 (An attacker could cause a heap buffer overflow by getting a
user to op ...)
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-103500
CVE-2026-103476 (yii2-starter-kit through 4.2.0 fails to validate article
publication s ...)
NOT-FOR-US: yii2-starter-kit
@@ -2312,7 +2312,7 @@ CVE-2026-100756 (Incorrect boundary conditions in the
Audio/Video: Playback comp
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100756
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100756
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100756
@@ -2320,7 +2320,7 @@ CVE-2026-100757 (Use-after-free in the Widget component.
This vulnerability was
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100757
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100757
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100757
@@ -2328,7 +2328,7 @@ CVE-2026-100758 (Sandbox escape in the DOM: Navigation
component. This vulnerabi
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100758
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100758
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100758
@@ -2336,7 +2336,7 @@ CVE-2026-100759 (Uninitialized memory in the Storage:
Quota Manager component. T
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100759
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100759
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100759
@@ -2344,7 +2344,7 @@ CVE-2026-100760 (Sandbox escape in the Security: Process
Sandboxing component. T
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100760
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100760
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100760
@@ -2355,7 +2355,7 @@ CVE-2026-100762 (Sandbox escape due to use-after-free in
the DOM: Content Proces
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100762
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100762
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100762
@@ -2369,7 +2369,7 @@ CVE-2026-100765 (Use-after-free in the JavaScript:
WebAssembly component. This v
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100765
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100765
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100765
@@ -2377,7 +2377,7 @@ CVE-2026-100766 (Information disclosure in the
Networking: JAR component. This v
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100766
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100766
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100766
@@ -2385,7 +2385,7 @@ CVE-2026-100767 (Use-after-free in the Networking: Cache
component. This vulnera
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100767
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100767
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100767
@@ -2396,7 +2396,7 @@ CVE-2026-100769 (Use-after-free in the JavaScript:
WebAssembly component. This v
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100769
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100769
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100769
@@ -2404,7 +2404,7 @@ CVE-2026-100770 (Sandbox escape due to use-after-free in
the DOM: Content Proces
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100770
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100770
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100770
@@ -2412,7 +2412,7 @@ CVE-2026-100771 (Undefined behavior in the DOM: Streams
component. This vulnerab
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100771
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100771
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100771
@@ -2420,7 +2420,7 @@ CVE-2026-100772 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100772
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100772
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100772
@@ -2428,7 +2428,7 @@ CVE-2026-100773 (Use-after-free in the Storage: IndexedDB
component. This vulner
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100773
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100773
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100773
@@ -2436,7 +2436,7 @@ CVE-2026-100774 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100774
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100774
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100774
@@ -2444,7 +2444,7 @@ CVE-2026-100775 (Sandbox escape in the Graphics
component. This vulnerability wa
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100775
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100775
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100775
@@ -2452,7 +2452,7 @@ CVE-2026-100776 (Use-after-free in the JavaScript:
WebAssembly component. This v
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100776
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100776
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100776
@@ -2460,7 +2460,7 @@ CVE-2026-100777 (Use-after-free in the Graphics: Canvas2D
component. This vulner
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100777
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100777
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100777
@@ -2468,7 +2468,7 @@ CVE-2026-100778 (Sandbox escape due to use-after-free in
the DOM: Core & HTML co
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100778
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100778
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100778
@@ -2476,7 +2476,7 @@ CVE-2026-100779 (Use-after-free in the XSLT component.
This vulnerability was fi
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100779
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100779
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100779
@@ -2484,7 +2484,7 @@ CVE-2026-100780 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100780
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100780
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100780
@@ -2492,7 +2492,7 @@ CVE-2026-100781 (Sandbox escape due to incorrect boundary
conditions in the Grap
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100781
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100781
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100781
@@ -2500,7 +2500,7 @@ CVE-2026-100782 (Privilege escalation due to incorrect
boundary conditions in th
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100782
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100782
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100782
@@ -2508,7 +2508,7 @@ CVE-2026-100783 (Uninitialized memory in the Audio/Video
component. This vulnera
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100783
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100783
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100783
@@ -2516,7 +2516,7 @@ CVE-2026-100784 (Use-after-free in the Layout: Text and
Fonts component. This vu
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100784
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100784
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100784
@@ -2524,7 +2524,7 @@ CVE-2026-100785 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100785
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100785
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100785
@@ -2532,7 +2532,7 @@ CVE-2026-100786 (Sandbox escape due to use-after-free in
the Graphics component.
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100786
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100786
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100786
@@ -2540,7 +2540,7 @@ CVE-2026-100787 (Sandbox escape in the XUL component.
This vulnerability was fix
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100787
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100787
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100787
@@ -2548,7 +2548,7 @@ CVE-2026-100788 (Invalid pointer in the JavaScript:
WebAssembly component. This
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100788
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100788
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100788
@@ -2556,7 +2556,7 @@ CVE-2026-100789 (Use-after-free in the Graphics: Canvas2D
component. This vulner
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100789
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100789
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100789
@@ -2564,7 +2564,7 @@ CVE-2026-100790 (Use-after-free in the XSLT component.
This vulnerability was fi
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100790
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100790
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100790
@@ -2572,7 +2572,7 @@ CVE-2026-100791 (Use-after-free in the DOM: Core & HTML
component. This vulnerab
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100791
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100791
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100791
@@ -2580,7 +2580,7 @@ CVE-2026-100792 (JIT miscompilation in the JavaScript:
WebAssembly component. Th
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100792
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100792
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100792
@@ -2591,7 +2591,7 @@ CVE-2026-100794 (Sandbox escape due to incorrect boundary
conditions in the Inte
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100794
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100794
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100794
@@ -2599,7 +2599,7 @@ CVE-2026-96869 (Information disclosure in the Networking
component. This vulnera
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-96869
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-96869
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-96869
@@ -2613,7 +2613,7 @@ CVE-2026-100797 (Privilege escalation due to
use-after-free in the Graphics: Web
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100797
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100797
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100797
@@ -2621,7 +2621,7 @@ CVE-2026-100798 (Cryptography misuse in Storage: Quota
Manager component. This v
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100798
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100798
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100798
@@ -2632,7 +2632,7 @@ CVE-2026-100800 (Sandbox escape due to use-after-free in
the Disability Access A
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100800
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100800
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100800
@@ -2640,7 +2640,7 @@ CVE-2026-100801 (Privilege escalation in the DLL Services
component. This vulner
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100801
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100801
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100801
@@ -2651,7 +2651,7 @@ CVE-2026-100803 (Same-origin policy bypass in the
WebExtensions component. This
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100803
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100803
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100803
@@ -2665,7 +2665,7 @@ CVE-2026-100806 (Uninitialized memory in the Graphics:
WebGPU component. This vu
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100806
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100806
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100806
@@ -2673,7 +2673,7 @@ CVE-2026-100807 (Privilege escalation in the DOM: Service
Workers component. Thi
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100807
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100807
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100807
@@ -2681,7 +2681,7 @@ CVE-2026-100808 (Mitigation bypass in the DOM: Service
Workers component. This v
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100808
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100808
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100808
@@ -2689,7 +2689,7 @@ CVE-2026-100809 (Same-origin policy bypass in the
DevTools component. This vulne
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100809
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100809
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100809
@@ -2700,7 +2700,7 @@ CVE-2026-100811 (Sandbox escape due to use-after-free in
the DOM: Core & HTML co
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100811
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100811
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100811
@@ -2708,7 +2708,7 @@ CVE-2026-100812 (Denial-of-service in the Graphics
component. This vulnerability
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100812
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100812
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100812
@@ -2719,7 +2719,7 @@ CVE-2026-100814 (Incorrect boundary conditions in the
JavaScript Engine: JIT com
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100814
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100814
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100814
@@ -2727,7 +2727,7 @@ CVE-2026-100815 (Use-after-free in the CSS Parsing and
Computation component. Th
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100815
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100815
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100815
@@ -2735,7 +2735,7 @@ CVE-2026-100816 (Site isolation issue in the DOM:
Networking component. This vul
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100816
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100816
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100816
@@ -2746,7 +2746,7 @@ CVE-2026-100818 (Sandbox escape due to use-after-free in
the Widget: Gtk compone
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100818
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100818
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100818
@@ -2754,7 +2754,7 @@ CVE-2026-100819 (Sandbox escape due to incorrect boundary
conditions in the XPCO
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100819
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100819
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100819
@@ -2762,7 +2762,7 @@ CVE-2026-100820 (Privilege escalation in the Address Bar
component. This vulnera
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100820
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100820
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100820
@@ -2770,7 +2770,7 @@ CVE-2026-100821 (Site isolation issue in the Panning and
Zooming component. This
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100821
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100821
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100821
@@ -2778,7 +2778,7 @@ CVE-2026-100822 (Spoofing issue in the Networking: HTTP
component. This vulnerab
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100822
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100822
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100822
@@ -2789,7 +2789,7 @@ CVE-2026-100824 (Privilege escalation in the Places
component. This vulnerabilit
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100824
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100824
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100824
@@ -2797,7 +2797,7 @@ CVE-2026-100825 (Use-after-free in the JavaScript Engine:
JIT component. This vu
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100825
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100825
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100825
@@ -2805,7 +2805,7 @@ CVE-2026-100826 (Denial-of-service in the Storage:
StorageManager component. Thi
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100826
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100826
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100826
@@ -2813,7 +2813,7 @@ CVE-2026-100828 (Mitigation bypass in the Bookmarks &
History component. This vu
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100828
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100828
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100828
@@ -2821,7 +2821,7 @@ CVE-2026-100829 (Mitigation bypass in the DOM: Security
component. This vulnerab
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100829
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100829
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100829
@@ -2829,7 +2829,7 @@ CVE-2026-100830 (Mitigation bypass in the DOM: Navigation
component. This vulner
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100830
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100830
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100830
@@ -2837,14 +2837,14 @@ CVE-2026-100831 (Use-after-free in the DOM: UI Events &
Focus Handling component
{DSA-6533-1}
- firefox 157.0-1
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-97/#CVE-2026-100831
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100831
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100831
CVE-2026-100832 (Use-after-free in the Graphics: Canvas2D component. This
vulnerability ...)
{DSA-6533-1}
- firefox-esr 153.4.0esr-1
- - thunderbird <unfixed>
+ - thunderbird 1:153.4.0esr-1
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-100/#CVE-2026-100832
NOTE:
https://www.mozilla.org/en-US/security/advisories/mfsa2026-103/#CVE-2026-100832
CVE-2026-84782 (Issue summary: The DTLS retransmission logic does not
correctly handle ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f2db8c155ecea18b965b7aab384a0a83e9373031
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f2db8c155ecea18b965b7aab384a0a83e9373031
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
