[SECURITY] [DSA 5932-1] thunderbird security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5932-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
May 30, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : thunderbird
CVE ID : CVE-2025-4918 CVE-2025-4919 CVE-2025-5263 CVE-2025-5264
CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269
CVE-2025-5283
Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code.
For the stable distribution (bookworm), these problems have been fixed in
version 1:128.11.0esr-1~deb12u1.
We recommend that you upgrade your thunderbird packages.
For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=xDth
-----END PGP SIGNATURE-----
Reply to: