-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5876-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
March 08, 2025                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : thunderbird
CVE ID         : CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 
                 CVE-2025-1934 CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 
                 CVE-2025-1938

Multiple security issues were discovered in Thunderbird, which could
result in denial of service or the execution of arbitrary code.

For the stable distribution (bookworm), these problems have been fixed in
version 1:128.8.0esr-1~deb12u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmfMiL8ACgkQEMKTtsN8
TjaTiw/+O2Ibh6/RRxDF1bvziCEW1yIVzg6vlS3JiFSVWaniB39pvS5pGDQLEvlY
iGVO7omGPFuwbvrFIxTXMExfSZZ3F5X+Zxs3Bx8MiB52CfsnFNuudkniw5KtwiXo
4GjV0EMctjVhUTFlSK0Qx7EtDxV/Bh5G7RCtDfWvaUwgnqs8VjUi4JUAbZTzkaBR
lt13NoP/dh/g9qJBzaPZmWrsULiQcTb9wdCSd5ugDBx1FrhL91PfbxWCRrnedHBX
wRxkkpkCm5Lmtt9XmDxLYyimvq4hBzu2mUZaw85HLdPdafw47lo6nBNltE24Sfd3
yoLw6ln35hYkrIWY6nHdesEpcp3vDrz/zRuH1JRZzoFyhGfDVZ6NRkUSORrJy5wi
6Y5p9P0a/OBE0yrKufHzBHfdkJcn45nM5f7TRDci4YB5bx9QSYcw5gUOMvHFGR+O
HFHmnR4ZOCVovw2NZadsIFMsLq+RSflizdafoGobQ+4k5J9WgEcayoJZxJyrlC4c
etvYbKH57iGKpaRb+nBriwfkDIzNhY28jmpDUBuRfmFb+jsi8O3/Lcds9HW8rlsC
S7lpw4dTdaCcHSS21l2k23gbUw+Vp0QYW+Sx7DVjg4I6DboQcxYf+ex9ySWquGjF
03jmXwEP/HqPKEHucgyAGSIhSAhv3N3aXXkqOVxTvoW+Rh/W12M=
=SH97
-----END PGP SIGNATURE-----