-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 21:02:12 -0400 Source: thunderbird Binary: thunderbird thunderbird-dbgsym Architecture: riscv64 Version: 1:140.17.0esr-1~deb13u1 Distribution: trixie-security Urgency: medium Maintainer: riscv64 Build Daemon (rv-manda-01) Changed-By: Christoph Goehre Description: thunderbird - mail/news client with RSS, chat and integrated spam filter suppor Changes: thunderbird (1:140.17.0esr-1~deb13u1) trixie-security; urgency=medium . * [59b44f0] New upstream version 140.17.0esr Fixed CVE issues in upstream version 140.17 (MFSA 2026-102): CVE-2026-103500: Heap buffer overflow opening large email CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component CVE-2026-100757: Use-after-free in the Widget component CVE-2026-100758: Sandbox escape in the DOM: Navigation component CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component CVE-2026-100766: Information disclosure in the Networking: JAR component CVE-2026-100767: Use-after-free in the Networking: Cache component CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component CVE-2026-100771: Undefined behavior in the DOM: Streams component CVE-2026-100772: Use-after-free in the DOM: Core & HTML component CVE-2026-100773: Use-after-free in the Storage: IndexedDB component CVE-2026-100774: Use-after-free in the DOM: Core & HTML component CVE-2026-100775: Sandbox escape in the Graphics component CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component CVE-2026-100779: Use-after-free in the XSLT component CVE-2026-100780: Use-after-free in the DOM: Core & HTML component CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component CVE-2026-100783: Uninitialized memory in the Audio/Video component CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component CVE-2026-100785: Use-after-free in the DOM: Core & HTML component CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component CVE-2026-100790: Use-after-free in the XSLT component CVE-2026-100791: Use-after-free in the DOM: Core & HTML component CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component CVE-2026-96869: Information disclosure in the Networking component CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component CVE-2026-100801: Privilege escalation in the DLL Services component CVE-2026-100803: Same-origin policy bypass in the WebExtensions component CVE-2026-100807: Privilege escalation in the DOM: Service Workers component CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component CVE-2026-100820: Privilege escalation in the Address Bar component CVE-2026-100821: Site isolation issue in the Panning and Zooming component Checksums-Sha1: 3ebdd085ea5afec86b70527f6e349788d47de629 8577584 thunderbird-dbgsym_140.17.0esr-1~deb13u1_riscv64.deb 590e8208f44c08e41d1905f1d0b03741cea7d1f6 21404 thunderbird_140.17.0esr-1~deb13u1_riscv64-buildd.buildinfo af2e075a6230fa77d41a68117a9f13a768d6101d 65875748 thunderbird_140.17.0esr-1~deb13u1_riscv64.deb Checksums-Sha256: 1940db030d51c741872eb8c25078fb1a74c01bd1babcea0ac61f79b4509b44e8 8577584 thunderbird-dbgsym_140.17.0esr-1~deb13u1_riscv64.deb 07118c438baad08275bd5087666f1c4c1334e4aab75d453db28914bd62aabfc7 21404 thunderbird_140.17.0esr-1~deb13u1_riscv64-buildd.buildinfo c4831b7613e60bda1f2330c2b104c5d6643ed46404a79fa525570eefae949d7d 65875748 thunderbird_140.17.0esr-1~deb13u1_riscv64.deb Files: d76f8936e848a5ee94b1a85d25e03b71 8577584 debug optional thunderbird-dbgsym_140.17.0esr-1~deb13u1_riscv64.deb 2cdf17ac3b64b9a1893a954e4df1a774 21404 mail optional thunderbird_140.17.0esr-1~deb13u1_riscv64-buildd.buildinfo e8c6429d3c8002e75bf03c1d170b5f1c 65875748 mail optional thunderbird_140.17.0esr-1~deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwN+C+Bc8deN4UliX50ghctvtZFQFAmq+hosACgkQ50ghctvt ZFTT9xAAlNWL5LbfuYc0AR9wRyvooLIXkZFP/1UNYv5c8BtWp0pUJ42h3LbE7P3O jtpBjxMQv1qHptqjzttGX8nOsAQOACu04O1w1+02no3lRpCvsk9dQ+PKL8BTrMi9 4+929TOrc3P+sITeOj9fDCVMs/X9ruUZ02Yld1yXBuV692ILal41wdk4cl+Zevua s0R3eF6PxUYVFko834SO14tzhWUwcP4pVUnBXNPKk7uUy1GqZafLlaQAp22vqg41 OHN904cck+9V6vT8VEkF9DixJyBVtzOsz9YbFV0M+CqEU/RKPe4rQwG+Ghf8AK8L GJBxg2zH/oHbSkcL1aBHjvZ78CivCkTnyUXRRrCh0lk1g9W1KS1tFz0eoyuN+uyp mcHZeU0eElNsc6yvEZ1SPR0X9vkv8aV2RrLW7VrOPC2eyfBf8qnpr6tbg3yX6VBy wHEmrM5FGRvu60w06zOp7fkLtuHW/CdgPG2bFLzyU3zGNgPinYz4w59cfwFPkWf2 y+0ifrgkm1Q3bX+L27xzWtpevnqszFPA8cW2l1m1tFmNNRljiNeHwQUrUFF9qp9G ggIAjREVtODcl6PSbkh6p+L++q8krP4UBWSG8QtYmFJ+dlITxY7l/KcYzpnCnpbH y6ue+3KzrLOPnwJ7YaJqmnirCd2AkipIBehFQefd6Y2ZXLh9qwE= =v1EY -----END PGP SIGNATURE-----