Debian alert DLA-3400-1 (thunderbird)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 3400-1] thunderbird security update
Date:
             
 
Mon, 24 Apr 2023 10:55:14 +0200
Message-ID:
             
 
<20230424085514.E4F4E2A076D@andromeda>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3400-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
April 24, 2023                                https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : thunderbird
Version        : 1:102.10.0-1~deb10u1
CVE ID         : CVE-2023-0547 CVE-2023-1945 CVE-2023-28427 CVE-2023-29479
                 CVE-2023-29533 CVE-2023-29535 CVE-2023-29536 CVE-2023-29539
                 CVE-2023-29541 CVE-2023-29548 CVE-2023-29550

Multiple security issues were discovered in Thunderbird, which could
result in denial of service or the execution of arbitrary code.

For Debian 10 buster, these problems have been fixed in version
1:102.10.0-1~deb10u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=gEus
-----END PGP SIGNATURE-----