DSA-4337-1 thunderbird -- security update

Debian Security Advisory

DSA-4337-1 thunderbird -- security update

Date Reported:

10 Nov 2018

Affected Packages:

thunderbird

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2018-12389, CVE-2018-12390, CVE-2018-12392, CVE-2018-12393.

More information:

Multiple security issues have been found in Thunderbird: Multiple memory safety errors may lead to the execution of arbitrary code or denial of service.

For the stable distribution (stretch), these problems have been fixed in version 1:60.3.0-1~deb9u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to its security tracker page at: https://security-tracker.debian.org/tracker/thunderbird