-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5488-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
September 03, 2023                    https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : thunderbird
CVE ID         : CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4581
                 CVE-2023-4584

Multiple security issues were discovered in Thunderbird, which could
result in denial of service or the execution of arbitrary code.

For the oldstable distribution (bullseye), these problems have been fixed
in version 1:102.15.0-1~deb11u1.

For the stable distribution (bookworm), these problems have been fixed in
version 1:102.15.0-1~deb12u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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/dxn
-----END PGP SIGNATURE-----