Debian alert DLA-4511-1 (thunderbird)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4511-1] thunderbird security update
Date:
             
 
Thu, 26 Mar 2026 23:13:08 +0100
Message-ID:
             
 
<20260326221308.E79D05F00082@kamino>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4511-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
March 26, 2026                                https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : thunderbird
Version        : 1:140.9.0esr-1~deb11u1
CVE ID         : CVE-2025-59375 CVE-2026-3889 CVE-2026-4371 CVE-2026-4684
                 CVE-2026-4685 CVE-2026-4686 CVE-2026-4687 CVE-2026-4688
                 CVE-2026-4689 CVE-2026-4690 CVE-2026-4691 CVE-2026-4692
                 CVE-2026-4693 CVE-2026-4694 CVE-2026-4695 CVE-2026-4696
                 CVE-2026-4697 CVE-2026-4698 CVE-2026-4699 CVE-2026-4700
                 CVE-2026-4701 CVE-2026-4702 CVE-2026-4704 CVE-2026-4705
                 CVE-2026-4706 CVE-2026-4707 CVE-2026-4708 CVE-2026-4709
                 CVE-2026-4710 CVE-2026-4713 CVE-2026-4714 CVE-2026-4715
                 CVE-2026-4716 CVE-2026-4717 CVE-2026-4718 CVE-2026-4719
                 CVE-2026-4720 CVE-2026-4721

Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code or information disclosure.

For Debian 11 bullseye, these problems have been fixed in version
1:140.9.0esr-1~deb11u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=OpwO
-----END PGP SIGNATURE-----