[Bug 1949605] Re: Backport Thunderbird 91 to 20.04 LTS and 18.04 LTS

[Clemens Drüe]

This is now a security issue. As the vulnerability CVE-2021-38503 is currently actively exploited and  will not be fixed in 1.78 series, which is EOL (see https://www.mozilla.org/en-US/security/advisories/mfsa2021-50/)
The latest version available in focal and focal-updates repositories is 1.78.13 (even not the latest available version of the 1.78 series).

This is a show stopper for an LTS edition; please fix rapidly!


** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-38503

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-38504

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-38506

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to thunderbird in Ubuntu.
https://bugs.launchpad.net/bugs/1949605

Title:
  Backport Thunderbird 91 to 20.04 LTS and 18.04 LTS

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1949605/+subscriptions