Debian alert DSA-6536-1 (thunderbird)

From:
             
 
Moritz Muehlenhoff <jmm@debian.org>
To:
             
 
debian-security-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DSA 6536-1] thunderbird security update
Date:
             
 
Thu, 01 Oct 2026 18:35:34 +0000
Message-ID:
             
 
<ar6n9grxDaLbzkgj@seger.debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6536-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
October 01, 2026                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : thunderbird
CVE ID         : CVE-2026-92035 CVE-2026-96869 CVE-2026-100756 CVE-2026-100757 
                 CVE-2026-100758 CVE-2026-100759 CVE-2026-100762 CVE-2026-100766 
                 CVE-2026-100767 CVE-2026-100769 CVE-2026-100770 CVE-2026-100771 
                 CVE-2026-100772 CVE-2026-100773 CVE-2026-100774 CVE-2026-100775 
                 CVE-2026-100776 CVE-2026-100777 CVE-2026-100778 CVE-2026-100779 
                 CVE-2026-100780 CVE-2026-100781 CVE-2026-100782 CVE-2026-100783 
                 CVE-2026-100784 CVE-2026-100785 CVE-2026-100786 CVE-2026-100788 
                 CVE-2026-100789 CVE-2026-100790 CVE-2026-100791 CVE-2026-100792 
                 CVE-2026-100794 CVE-2026-100797 CVE-2026-100801 CVE-2026-100803 
                 CVE-2026-100807 CVE-2026-100811 CVE-2026-100818 CVE-2026-100819 
                 CVE-2026-100820 CVE-2026-100821 CVE-2026-100832 CVE-2026-103500

Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code.

For the stable distribution (trixie), these problems have been fixed in
version 1:140.17.0esr-1~deb13u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmq+p9IACgkQEMKTtsN8
TjZAkBAAu294AIRVaHWVejhTIAAi3AIfotw1yceeQzskOLNlloT6IQD6OqYZGRIt
+rtOr/ofnMegg9eG3j108pBxNmBCgLOdpHYWBCY0qma7xjoh6GEBqNUHDEI94l/f
jn4cjT9VX1ReTo5GUg7rsfbHkGIdIwdF+lldLTZNyvavn6YcAtTypkTA4IL8Hrhs
7bByTO0K9gaCPJQlXkjAuN9fg27cENpWAdaaYjcb7rVpLbnBtbJsM7x3kGb+80fu
WUbwhAA5v88PkGlQOzsY53jQCYSq9ZHx+1S1g4rgLeDPcGvi4Hue3mOvNSPdv20I
6r6i5L720vee555OrTC0DgI6AFpOsSaEQBUrgtYTIkXckp0s8gG/nG5XWRHbSrH4
fw2gl3DZkho3RWTpt5cfuqj3JiJraCSuRkXqXxMq0VhEcuMdkWfXI1UbCxaN+FRo
NGQUgEAxoSAWi/3m3Rutv81p4Zu7jt5gUQP0nhoIDnivmM8zyzZYEBJ/KVK4dLpF
OQPNwuBWUbiPq3BsJZ2Jfv9LJ0/FcHHRehO/XNVArFZN93sEO6F/gXWRNrALlERm
7ZGiKmT024VzYkBZpA+Rvs1UPtg+uqySx9H+zLlXo3q9dnMgRT/UM04S6zqZ0eoz
r9errBvnXxlDr2QN+Ibi3AVdo1t81A/VIBzokNoDIEWB9W0jf5Y=
=vjDZ
-----END PGP SIGNATURE-----