[SECURITY] [DSA 6536-1] thunderbird security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6536-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
October 01, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : thunderbird
CVE ID : CVE-2026-92035 CVE-2026-96869 CVE-2026-100756 CVE-2026-100757
CVE-2026-100758 CVE-2026-100759 CVE-2026-100762 CVE-2026-100766
CVE-2026-100767 CVE-2026-100769 CVE-2026-100770 CVE-2026-100771
CVE-2026-100772 CVE-2026-100773 CVE-2026-100774 CVE-2026-100775
CVE-2026-100776 CVE-2026-100777 CVE-2026-100778 CVE-2026-100779
CVE-2026-100780 CVE-2026-100781 CVE-2026-100782 CVE-2026-100783
CVE-2026-100784 CVE-2026-100785 CVE-2026-100786 CVE-2026-100788
CVE-2026-100789 CVE-2026-100790 CVE-2026-100791 CVE-2026-100792
CVE-2026-100794 CVE-2026-100797 CVE-2026-100801 CVE-2026-100803
CVE-2026-100807 CVE-2026-100811 CVE-2026-100818 CVE-2026-100819
CVE-2026-100820 CVE-2026-100821 CVE-2026-100832 CVE-2026-103500
Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code.
For the stable distribution (trixie), these problems have been fixed in
version 1:140.17.0esr-1~deb13u1.
We recommend that you upgrade your thunderbird packages.
For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmq+p9IACgkQEMKTtsN8
TjZAkBAAu294AIRVaHWVejhTIAAi3AIfotw1yceeQzskOLNlloT6IQD6OqYZGRIt
+rtOr/ofnMegg9eG3j108pBxNmBCgLOdpHYWBCY0qma7xjoh6GEBqNUHDEI94l/f
jn4cjT9VX1ReTo5GUg7rsfbHkGIdIwdF+lldLTZNyvavn6YcAtTypkTA4IL8Hrhs
7bByTO0K9gaCPJQlXkjAuN9fg27cENpWAdaaYjcb7rVpLbnBtbJsM7x3kGb+80fu
WUbwhAA5v88PkGlQOzsY53jQCYSq9ZHx+1S1g4rgLeDPcGvi4Hue3mOvNSPdv20I
6r6i5L720vee555OrTC0DgI6AFpOsSaEQBUrgtYTIkXckp0s8gG/nG5XWRHbSrH4
fw2gl3DZkho3RWTpt5cfuqj3JiJraCSuRkXqXxMq0VhEcuMdkWfXI1UbCxaN+FRo
NGQUgEAxoSAWi/3m3Rutv81p4Zu7jt5gUQP0nhoIDnivmM8zyzZYEBJ/KVK4dLpF
OQPNwuBWUbiPq3BsJZ2Jfv9LJ0/FcHHRehO/XNVArFZN93sEO6F/gXWRNrALlERm
7ZGiKmT024VzYkBZpA+Rvs1UPtg+uqySx9H+zLlXo3q9dnMgRT/UM04S6zqZ0eoz
r9errBvnXxlDr2QN+Ibi3AVdo1t81A/VIBzokNoDIEWB9W0jf5Y=
=vjDZ
-----END PGP SIGNATURE-----
Reply to: