Alerts This Week
Warning Icon 1 625
Alerts This Week
Warning Icon 1 625

Debian Bookworm Thunderbird Critical Info Leak and Code Exec DSA-6179-1

debian
Calendar Grey March 26, 2026
Debian Logo
Upgrade Thunderbird to fix multiple security issues including arbitrary code execution and information disclosure.
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure
Topics%20covered

Topics Covered

security advisory debian arbitrary code execution important thunderbird info disclosure

Summary

For the oldstable distribution (bookworm), these problems have been
fixed in version 1:140.9.0esr-1~deb12u1.

For the stable distribution (trixie), these problems have been fixed in
version 1:140.9.0esr-1~deb13u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
important
Lowest
Low
Medium
High
Critical

Package: thunderbird
CVE ID: CVE-2025-59375 CVE-2026-3889 CVE-2026-4371 CVE-2026-4684

Topics%20covered

Topics Covered

security advisory debian arbitrary code execution important thunderbird info disclosure

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here