Debian alert DLA-2578-1 (thunderbird)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 2578-1] thunderbird security update
Date:
             
 
Mon, 01 Mar 2021 15:44:10 +0100
Message-ID:
             
 
<20210301144410.E35C92A0372@andromeda>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2578-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
March 01, 2021                                https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : thunderbird
Version        : 1:78.8.0-1~deb9u1
CVE ID         : CVE-2021-23968 CVE-2021-23969 CVE-2021-23973 CVE-2021-23978

Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code or information disclosure.

For Debian 9 stretch, these problems have been fixed in version
1:78.8.0-1~deb9u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=Ydkk
-----END PGP SIGNATURE-----