Home / mailings [SECURITY] [DSA 6536-1] thunderbird security update
Posted on 01 October 2026
Debian Security Advisory- -------------------------------------------------------------------------
Debian Security Advisory DSA-6536-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
October 01, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : thunderbird
CVE ID : CVE-2026-92035 CVE-2026-96869 CVE-2026-100756 CVE-2026-100757
CVE-2026-100758 CVE-2026-100759 CVE-2026-100762 CVE-2026-100766
CVE-2026-100767 CVE-2026-100769 CVE-2026-100770 CVE-2026-100771
CVE-2026-100772 CVE-2026-100773 CVE-2026-100774 CVE-2026-100775
CVE-2026-100776 CVE-2026-100777 CVE-2026-100778 CVE-2026-100779
CVE-2026-100780 CVE-2026-100781 CVE-2026-100782 CVE-2026-100783
CVE-2026-100784 CVE-2026-100785 CVE-2026-100786 CVE-2026-100788
CVE-2026-100789 CVE-2026-100790 CVE-2026-100791 CVE-2026-100792
CVE-2026-100794 CVE-2026-100797 CVE-2026-100801 CVE-2026-100803
CVE-2026-100807 CVE-2026-100811 CVE-2026-100818 CVE-2026-100819
CVE-2026-100820 CVE-2026-100821 CVE-2026-100832 CVE-2026-103500
Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code.
For the stable distribution (trixie), these problems have been fixed in
version 1:140.17.0esr-1~deb13u1.
We recommend that you upgrade your thunderbird packages.
For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
