The officially official Devuan Forum!

the_edge123

Member

Registered: 2020-05-19

Posts: 11  

security update delayed for thunderbird ?

Hello,
It seems that the update is not taken into account yet.

Debian Security Advisory
DSA-4754-1 thunderbird -- security update

Date Reported:
    29 Aug 2020
Affected Packages:
    thunderbird
Vulnerable:
    Yes
Security database references:
    In Mitre's CVE dictionary: CVE-2020-15664, CVE-2020-15669.
More information:

    Multiple security issues have been found in Thunderbird which could result in the execution of arbitrary code or the unintended installation of extensions.

    For the stable distribution (buster), these problems have been fixed in version 1:68.12.0-1~deb10u1.

    We recommend that you upgrade your thunderbird packages.

    For the detailed security status of thunderbird please refer to its security tracker page at: https://security-tracker.debian.org/tracker/thunderbird

Is it related to this post https://dev1galaxy.org/viewtopic.php?id=2702?

--
Fabien

Marjorie

Member

From: Teignmouth, UK

Registered: 2019-06-09

Posts: 221  

Re: security update delayed for thunderbird ?

The fix thunderbird 1.68.12.0.1-deb10u1  is already in Debian: https://www.debian.org/security/2020/dsa-4754, looking at my mirror with Synaptic it's in Devuan (stable -security) too.

Last edited by Marjorie (2020-08-31 21:27:38)

the_edge123

Member

Registered: 2020-05-19

Posts: 11  

Re: security update delayed for thunderbird ?

Ok, I've just got the update.
--
Fabien