[SECURITY] [DSA 5984-1] thunderbird security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5984-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
August 24, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : thunderbird
CVE ID : CVE-2025-9179 CVE-2025-9180 CVE-2025-9181 CVE-2025-9185
Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code.
For the oldstable distribution (bookworm), these problems have been fixed
in version 1:128.14.0esr-1~deb12u1.
For the stable distribution (trixie), these problems have been fixed in
version 1:128.14.0esr-1~deb13u1.
We recommend that you upgrade your thunderbird packages.
For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=3sPj
-----END PGP SIGNATURE-----
Reply to: