Debian alert DLA-2360-1 (thunderbird)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org> 
To:
             
 
debian-lts-announce@lists.debian.org 
Subject:
             
 
[SECURITY] [DLA 2360-1] thunderbird security update 
Date:
             
 
Mon, 31 Aug 2020 14:03:35 +0200
Message-ID:
             
 
<3fe97c16-19aa-0d3c-2775-dbf409f246c6@debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2360-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
August 31, 2020                               https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : thunderbird
Version        : 1:68.12.0-1~deb9u1
CVE ID         : CVE-2020-15664 CVE-2020-15669

Multiple security issues have been found in Thunderbird which could
result in the execution of arbitrary code or the unintended installation
of extensions.

For Debian 9 stretch, these problems have been fixed in version
1:68.12.0-1~deb9u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=qTCX
-----END PGP SIGNATURE-----