[DSA 6081-1] thunderbird security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6081-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
December 14, 2025                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : thunderbird
CVE ID         : CVE-2025-14321 CVE-2025-14322 CVE-2025-14323 CVE-2025-14324 
                 CVE-2025-14325 CVE-2025-14328 CVE-2025-14329 CVE-2025-14330 
                 CVE-2025-14331 CVE-2025-14333

Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code.

For the oldstable distribution (bookworm), these problems have been fixed
in version 1:140.6.0esr-1~deb12u1.

For the stable distribution (trixie), these problems have been fixed in
version 1:140.6.0esr-1~deb13u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmk+mvsACgkQEMKTtsN8
TjYZJw/8DFD61EG/VRKuHFwF9vxdR5zt/Ce2EOs3hWGPV23WVpqRHfJ4DACKKJuo
6E6eiOGdEuhQ+iHE3bwt1R2t06TIqrDDB7clvr3APZ79Um2yHyZdSNrB3ggKWBF3
cTW/OumJ+tYo0k1PF6zbRcY5771EPOCjrAso8gXoPzr99UoCnhIRKbAGrljJuOMI
oVQAACNdiSt0E1YqEvWgzX27MzARg1RVzN1ZMtYTWAHxNosoBbiqURLeA5t0yI5s
k+6J4xJMJd6LikDXCNkEGSLtXJObj1Y07CunMOlz81H3FOASni+iuk7zfBK0muk0
nIqxi1xI4ESNuae3oZL9up8TJFB6h1z1j9oJTe/RNlP5azaDiyqshB8cdZo0daxo
Co2WNzwQJIxZV2SpltPnyPCkaIABQq9XKmU7SW+N3L8PM7CAjhiwBuAAvnNAFWlv
MSaCwD7L8iz6oCNqA1PkIkgPq4WaS8Yd98LGi4LFmUEmbu8/coTJ3anpcLwsy4Kf
Ld0M56G3+avN+bAOZYm5wu1zIvtysOanNE3Yd4JzSOF91eyje5PnyzGZJrCX6GlZ
bfzEMugCeXVPJRmuw/d62ySO4J65Ey8qr+xvCPwJ6n2GwKjr5q/5JIloQh478/mQ
ghsygbVQlVQo9ycxijWiImV5yoJmBOlktwBtKOUNREkGhiMAjuk=
=4KQ9
-----END PGP SIGNATURE-----