DSA-6179-1

NameDSA-6179-1
Descriptionthunderbird - security update
SourceDebian
ReferencesCVE-2025-59375, CVE-2026-3889, CVE-2026-4371, CVE-2026-4684, CVE-2026-4685, CVE-2026-4686, CVE-2026-4687, CVE-2026-4688, CVE-2026-4689, CVE-2026-4690, CVE-2026-4691, CVE-2026-4692, CVE-2026-4693, CVE-2026-4694, CVE-2026-4695, CVE-2026-4696, CVE-2026-4697, CVE-2026-4698, CVE-2026-4699, CVE-2026-4700, CVE-2026-4701, CVE-2026-4702, CVE-2026-4704, CVE-2026-4705, CVE-2026-4706, CVE-2026-4707, CVE-2026-4708, CVE-2026-4709, CVE-2026-4710, CVE-2026-4713, CVE-2026-4714, CVE-2026-4715, CVE-2026-4716, CVE-2026-4717, CVE-2026-4718, CVE-2026-4719, CVE-2026-4720, CVE-2026-4721

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
thunderbird (PTS)bookworm1:140.6.0esr-1~deb12u1vulnerable
bookworm (security)1:140.9.0esr-1~deb12u1fixed
trixie1:140.8.0esr-1~deb13u1vulnerable
trixie (security)1:140.9.0esr-1~deb13u1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
thunderbirdsourcebookworm1:140.9.0esr-1~deb12u1
thunderbirdsourcetrixie1:140.9.0esr-1~deb13u1

Search for package or bug name: Reporting problems