Debian alert DLA-4167-1 (thunderbird)

From:
             
 
Lee@bendel.debian.org, "Garrett <debian"@rocketjump.eu
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4167-1] thunderbird security update
Date:
             
 
Mon, 19 May 2025 12:33:45 +0000
Message-ID:
             
 
<E1uGzgf-008Wr6-0d@amdahl.debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4167-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                          Lee Garrett
May 18, 2025                                  https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : thunderbird
Version        : 1:128.10.1esr-1~deb11u1
CVE ID         : CVE-2025-2817 CVE-2025-4082 CVE-2025-4083 CVE-2025-4084
                 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093 CVE-2025-3875
                 CVE-2025-3877 CVE-2025-3909 CVE-2025-3932

Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code or information disclosure.

For Debian 11 bullseye, these problems have been fixed in version
1:128.10.1esr-1~deb11u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=2RUm
-----END PGP SIGNATURE-----