Debian alert DLA-4045-1 (thunderbird)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4045-1] thunderbird security update
Date:
             
 
Fri, 07 Feb 2025 22:32:52 +0100
Message-ID:
             
 
<20250207213252.14F8B2A01BD@andromeda>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4045-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
February 07, 2025                             https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : thunderbird
Version        : 1:128.7.0esr-1~deb11u1
CVE ID         : CVE-2024-11704 CVE-2025-1009 CVE-2025-1010 CVE-2025-1011
                 CVE-2025-1012 CVE-2025-1013 CVE-2025-1014 CVE-2025-1016
                 CVE-2025-1017

Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code.

For Debian 11 bullseye, these problems have been fixed in version
1:128.7.0esr-1~deb11u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=Ct6H
-----END PGP SIGNATURE-----