[DSA 5984-1] thunderbird security update

Moritz Muehlenhoff <[email protected]>
Newsgroups gmane.linux.debian.user.security.announce
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5984-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
August 24, 2025                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : thunderbird
CVE ID         : CVE-2025-9179 CVE-2025-9180 CVE-2025-9181 CVE-2025-9185

Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code.

For the oldstable distribution (bookworm), these problems have been fixed
in version 1:128.14.0esr-1~deb12u1.

For the stable distribution (trixie), these problems have been fixed in
version 1:128.14.0esr-1~deb13u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=3sPj
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.