-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4209-1 security@xxxxxxxxxx https://www.debian.org/security/ Moritz Muehlenhoff May 25, 2018 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : thunderbird CVE ID : CVE-2018-5150 CVE-2018-5154 CVE-2018-5155 CVE-2018-5159 CVE-2018-5161 CVE-2018-5162 CVE-2018-5168 CVE-2018-5170 CVE-2018-5178 CVE-2018-5183 CVE-2018-5184 CVE-2018-5185 Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or attacks on encrypted emails. For the oldstable distribution (jessie), these problems have been fixed in version 1:52.8.0-1~deb8u1. For the stable distribution (stretch), these problems have been fixed in version 1:52.8.0-1~deb9u1. We recommend that you upgrade your thunderbird packages. For the detailed security status of thunderbird please refer to its security tracker page at: https://security-tracker.debian.org/tracker/thunderbird Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlsHl1gACgkQEMKTtsN8 TjYMIhAAoBuMjRs0F271B/Rh0L8Fh775YuwEB7ePewxWJkR51Gp70sXflzXJb8W8 CkcpyQIpVQQJx/uo07h38SvWJlsZ3jm0o326hOOSzv8kNNiMZQwYkh7Oc3/oqnWa ctEuRQ/K1A7wAof7V12MtmoXUUDrDvCueOtlBLGSemHAIT2trP023g0qBYiwNKoL LfrzcarFxE8ksqga10owLGSgVKNqkoKorwlvsF/e7Iffczvw8+8SYJYvqzaWXTuJ gWWtrM512Fzvhtu9ySlaVQ+tEnDFI+J0AUdmLi3EhnXjTDvVPqGvx3RtKArrjXo7 ZgLmfmwbp538t1CtlgsO7v9Y8CBaBHpwgSpoa+cTjO4UKsjCsmFRV9T/9T27J8Bw +9ag0M/D+KrOZlDsiwh6UG7qaR8PKjjzrnfdqmQT+oQNYfSp8mBZ0VW+pM0IueI1 oCKIz4K/qFKJ/G13XKE78p3DU9knuP+H602UwIp8tOThilgm7EJv8fwPJYiSxH10 yX45MQ74hnTpzETB4xeWxSFo2JBFoPSBurWVd1FBCTF4CI/Nri6meYpU8FFNjRQe DS/zwUvkij7OmywNFNYCvHUu+sjKEKjOWnMh4NB+WXaqibS/VfmR+ZehrvHuCChd wGsHHysBc3J0ogK0sFKSEo7L3ygdGmDDadifsgbTMTug5kQGkv4= =xDyU -----END PGP SIGNATURE-----