-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 02 Sep 2026 09:10:45 -0400
Source: thunderbird
Binary: thunderbird thunderbird-dbgsym
Architecture: arm64
Version: 1:140.15.0esr-1~deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: arm64 Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Christoph Goehre <chris@sigxcpu.org>
Description:
 thunderbird - mail/news client with RSS, chat and integrated spam filter suppor
Changes:
 thunderbird (1:140.15.0esr-1~deb13u1) trixie-security; urgency=medium
 .
   * [4095154] New upstream version 140.15.0esr
     Fixed CVE issues in upstream version 140.15 (MFSA 2026-87):
     CVE-2026-84639: Uninitialized memory in MIME parsing
     CVE-2026-84640: One byte overflow read in mail parser
     CVE-2026-84641: Information disclosure due to malicious IMAP server
                     response
     CVE-2026-75874: Sandbox escape in the Remote Settings Client component
     CVE-2026-16365: Privilege escalation in the DOM: Workers component
     CVE-2026-84119: Sandbox escape due to use-after-free in the DOM:
                     Navigation component
     CVE-2026-84120: Use-after-free in the Audio/Video component
     CVE-2026-84121: Sandbox escape due to use-after-free in the DOM: Security
                     component
     CVE-2026-84122: Use-after-free in the Audio/Video component
     CVE-2026-84124: Use-after-free in the DOM: Core &amp; HTML component
     CVE-2026-16371: Privilege escalation in the DOM: Navigation component
     CVE-2026-84131: Privilege escalation due to invalid pointer in the
                     Graphics component
     CVE-2026-84143: Internally found bugs fixed in Thunderbird 155,
                     Thunderbird ESR 153.2 and Thunderbird ESR 140.15
     CVE-2026-84145: Internally found bugs fixed in Thunderbird 155,
                     Thunderbird ESR 153.2 and Thunderbird ESR 140.15
Checksums-Sha1:
 750a6fce6578238da2bd3544288b44eab282c946 524767096 thunderbird-dbgsym_140.15.0esr-1~deb13u1_arm64.deb
 680ffb60daffeb42e137d52dcece9b8f4ab93af0 21417 thunderbird_140.15.0esr-1~deb13u1_arm64-buildd.buildinfo
 d0a158d4f74a929a81cdf3d3bfa589b1428a715a 62437576 thunderbird_140.15.0esr-1~deb13u1_arm64.deb
Checksums-Sha256:
 49d8a14433d4dbc9a4b63e5f0dc2f0458650f9dc3658adcf8d9256aeb52cd3f3 524767096 thunderbird-dbgsym_140.15.0esr-1~deb13u1_arm64.deb
 8a7e7faac445804eb630d27784cd6b46f7e372eb662783e66fe70808dbb707b1 21417 thunderbird_140.15.0esr-1~deb13u1_arm64-buildd.buildinfo
 3bc149be1a8796331cb78fcab3dccf56867f049b1023638eb348459c31d05119 62437576 thunderbird_140.15.0esr-1~deb13u1_arm64.deb
Files:
 0d00db194d7153cdea5bd1968b759834 524767096 debug optional thunderbird-dbgsym_140.15.0esr-1~deb13u1_arm64.deb
 7b94e3483756c4a480077f5cf97dc410 21417 mail optional thunderbird_140.15.0esr-1~deb13u1_arm64-buildd.buildinfo
 08bc7a0e9c670b5b8b276a4c1f4410d5 62437576 mail optional thunderbird_140.15.0esr-1~deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=2od+
-----END PGP SIGNATURE-----