-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5375-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
March 17, 2023                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : thunderbird
CVE ID         : CVE-2023-25751 CVE-2023-25752 CVE-2023-28162 CVE-2023-28164 
                 CVE-2023-28176

Multiple security issues were discovered in Thunderbird, which could
result in denial of service, the execution of arbitrary code or
spoofing.

For the stable distribution (bullseye), these problems have been fixed in
version 1:102.9.0-1~deb11u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=Mv0t
-----END PGP SIGNATURE-----