[DSA 6040-1] thunderbird security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6040-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
October 26, 2025                      https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : thunderbird
CVE ID         : CVE-2025-11708 CVE-2025-11709 CVE-2025-11710
                 CVE-2025-11711 CVE-2025-11712 CVE-2025-11714
		 CVE-2025-11715

Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code.

For the oldstable distribution (bookworm), these problems have been fixed
in version 1:140.4.0esr-1~deb12u1.

For the stable distribution (trixie), these problems have been fixed in
version 1:140.4.0esr-1~deb13u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=RxK/
-----END PGP SIGNATURE-----