-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 02 Sep 2026 09:10:45 -0400
Source: thunderbird
Binary: thunderbird thunderbird-dbgsym
Architecture: ppc64el
Version: 1:140.15.0esr-1~deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-conova-02) <buildd_ppc64el-ppc64el-conova-02@buildd.debian.org>
Changed-By: Christoph Goehre <chris@sigxcpu.org>
Description:
 thunderbird - mail/news client with RSS, chat and integrated spam filter suppor
Changes:
 thunderbird (1:140.15.0esr-1~deb13u1) trixie-security; urgency=medium
 .
   * [4095154] New upstream version 140.15.0esr
     Fixed CVE issues in upstream version 140.15 (MFSA 2026-87):
     CVE-2026-84639: Uninitialized memory in MIME parsing
     CVE-2026-84640: One byte overflow read in mail parser
     CVE-2026-84641: Information disclosure due to malicious IMAP server
                     response
     CVE-2026-75874: Sandbox escape in the Remote Settings Client component
     CVE-2026-16365: Privilege escalation in the DOM: Workers component
     CVE-2026-84119: Sandbox escape due to use-after-free in the DOM:
                     Navigation component
     CVE-2026-84120: Use-after-free in the Audio/Video component
     CVE-2026-84121: Sandbox escape due to use-after-free in the DOM: Security
                     component
     CVE-2026-84122: Use-after-free in the Audio/Video component
     CVE-2026-84124: Use-after-free in the DOM: Core &amp; HTML component
     CVE-2026-16371: Privilege escalation in the DOM: Navigation component
     CVE-2026-84131: Privilege escalation due to invalid pointer in the
                     Graphics component
     CVE-2026-84143: Internally found bugs fixed in Thunderbird 155,
                     Thunderbird ESR 153.2 and Thunderbird ESR 140.15
     CVE-2026-84145: Internally found bugs fixed in Thunderbird 155,
                     Thunderbird ESR 153.2 and Thunderbird ESR 140.15
Checksums-Sha1:
 b5296d2425c14be24a1c1b93426cbf44d856f503 491500868 thunderbird-dbgsym_140.15.0esr-1~deb13u1_ppc64el.deb
 5a2f930c2adb98c81e4bf32019033ce2cf97090f 21330 thunderbird_140.15.0esr-1~deb13u1_ppc64el-buildd.buildinfo
 ba5f11d6468404a109c0505b3045a5a2859706e0 65085788 thunderbird_140.15.0esr-1~deb13u1_ppc64el.deb
Checksums-Sha256:
 6fcdb92dd77bdfb880103935152d563695bc55ac81a4d80af653e917a76f4e09 491500868 thunderbird-dbgsym_140.15.0esr-1~deb13u1_ppc64el.deb
 ca50214d9143465a28c982a1421c7fd96c75e26e4142adf08cc1e1ad19dacbd2 21330 thunderbird_140.15.0esr-1~deb13u1_ppc64el-buildd.buildinfo
 f0f9225a52e948fb4da6cbe36d2660802e7b3a4029758a325e684c4e84ffb0c9 65085788 thunderbird_140.15.0esr-1~deb13u1_ppc64el.deb
Files:
 f45b2c9c64c531559629ee2219ae4da8 491500868 debug optional thunderbird-dbgsym_140.15.0esr-1~deb13u1_ppc64el.deb
 c927b72f0e784f4e82c7f780b3f8b1a9 21330 mail optional thunderbird_140.15.0esr-1~deb13u1_ppc64el-buildd.buildinfo
 38fbff7ff09b9515079b8e447d5b234b 65085788 mail optional thunderbird_140.15.0esr-1~deb13u1_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=Ziy0
-----END PGP SIGNATURE-----