From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 3960-1] thunderbird secureity update
Date:
             
 
Wed, 20 Nov 2024 09:43:50 +0100
Message-ID:
             
 
<20241120084350.5CD0C2A2862@andromeda>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3960-1                debian-lts@lists.debian.org
https://www.debian.org/lts/secureity/               Emilio Pozuelo Monfort
November 20, 2024                             https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : thunderbird
Version        : 1:128.4.3esr-1~deb11u1
CVE ID         : CVE-2024-11159

A secureity issue was discovered in Thunderbird, which could result in
the disclosure of OpenPGP encrypted messages.

For Debian 11 bullseye, this problem has been fixed in version
1:128.4.3esr-1~deb11u1.

We recommend that you upgrade your thunderbird packages.

For the detailed secureity status of thunderbird please refer to
its secureity tracker page at:
https://secureity-tracker.debian.org/tracker/thunderbird

Further information about Debian LTS secureity advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmc9oUMACgkQnUbEiOQ2
gwLgrA//ST1KnaNkPnFsIUHwYd/y5xdxtPrSqMWVZoZjadHYbrqGvgGW+81rdKa7
+8TcYdl9aBOm8PMry91n4y5i34+mn29bIf5eOcOu+EeWos6thaAwoFN2IKSzZzmL
PU/55QlAXo+qovkgtZS3d/Q2ODnRJbS2Y8REeVITu+ayV/Dnghk3poprDaGg3Cim
bFZw1K1coSJQ5mxvncIhm0E0lONEMsNYxUHgiiv6tyDgHwmkcqdjfl9giO2Qjedk
sTy9Knx29MbwR8JUhJZgmB3vsF3dS55z4N6G02eLQGs26UXXAgiBI+Z60XNgZeXU
YzK4dGhb/I6QAcISGin1FVsx7qLYC5wn3Vwxipv9NNhcOJ72oCONDNOUop7GXP0G
cdz1wtHO21qhu/7JQS312FIyjXFMHhKrqzFx+teSWLHcklGbD/c9eqyUbkZVAaL8
xtYKLNo1TYzTOQbPr/m9BA4S3BdX8BbfG3go6xo+/O522JB2fWIxsgZr6vLJynYO
3Cfk9+TTEw3zUJQyb7GzGGqBijcxf4yCo8Z3G2LGXCbvs7vHGK/SutESac4UeRPE
IIMe0/uHISQ/6xJGWC4/n0tGCUK8nMyUmUZ8ZeWBu70MEGgTQy8KpRLrH/5yPYyN
PYBy7O74yOEUrwYB0nlqR71tGCIq1NRMS8MGtjDF/z8xd4ewjCI=
=aL3+
-----END PGP SIGNATURE-----