Debian/thunderbird: critical 9.6
Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115
Action: Upgrade thunderbird to 1:153.5.1esr-1~deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:153.5.1esr-1~deb13u1 | - |
Fixed versions
| 1:153.5.1esr-1~deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-109708#Debian:13/thunderbird
- https://security-tracker.debian.org/tracker/CVE-2026-109708
published · modified · JSON