[SECURITY] [DLA 4810-1] thunderbird security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4810-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
October 02, 2026 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : thunderbird
Version : 1:140.17.0esr-1~deb12u1
CVE ID : CVE-2026-92035 CVE-2026-96869 CVE-2026-100756 CVE-2026-100757
CVE-2026-100758 CVE-2026-100759 CVE-2026-100762 CVE-2026-100766
CVE-2026-100767 CVE-2026-100769 CVE-2026-100770 CVE-2026-100771
CVE-2026-100772 CVE-2026-100773 CVE-2026-100774 CVE-2026-100775
CVE-2026-100776 CVE-2026-100777 CVE-2026-100778 CVE-2026-100779
CVE-2026-100780 CVE-2026-100781 CVE-2026-100782 CVE-2026-100783
CVE-2026-100784 CVE-2026-100785 CVE-2026-100786 CVE-2026-100788
CVE-2026-100789 CVE-2026-100790 CVE-2026-100791 CVE-2026-100792
CVE-2026-100794 CVE-2026-100797 CVE-2026-100801 CVE-2026-100803
CVE-2026-100807 CVE-2026-100811 CVE-2026-100818 CVE-2026-100819
CVE-2026-100820 CVE-2026-100821 CVE-2026-100832 CVE-2026-103500
Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code.
For Debian 12 bookworm, these problems have been fixed in version
1:140.17.0esr-1~deb12u1.
We recommend that you upgrade your thunderbird packages.
For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=rSoO
-----END PGP SIGNATURE-----
Reply to: