Debian/thunderbird: medium 5.4

Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Action: Upgrade thunderbird to 1:153.5.1esr-1~deb13u1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2026-109752#Debian:13/thunderbird
• https://security-tracker.debian.org/tracker/CVE-2026-109752

published 2026-10-13T13:17:26.100Z · modified 2026-10-26T00:00:12.651460804Z · JSON