Hi,

91.6.2. is working so far, but it's not available yet:


[marius@eve ~]$ sudo dnf  --showduplicates list thunderbird --enablerepo=updates-testing
Letzte Prüfung auf abgelaufene Metadaten: vor 0:00:33 am Di 08 Mär 2022 17:29:24 CET.
Installierte Pakete
thunderbird.x86_64                                                                 91.6.2-1.fc34                                                                  @@commandline
Verfügbare Pakete
thunderbird.x86_64                                                                 78.8.1-2.fc34                                                                  fedora       
thunderbird.x86_64                                                                 91.5.0-1.fc34                                                                  updates      

please push the 91.6.2 build update to stable: possible Remote Code Execution
08.03.2022____________________________________________________________________________________________________
Betroffene Systeme:
Mozilla Firefox < 97.0.2
Mozilla Firefox for Android < 97.3.0
Mozilla Firefox ESR < 91.6.1
Mozilla Thunderbird < 91.6.2
Zusammenfassung:
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox 
ESR und Mozilla Thunderbird ausnutzen, um beliebigen Programmcode auszuführen.
____________________________________________________________________________________________________
Quellen:
- https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/
- https://ubuntu.com/security/notices/USN-5314-1
- https://lists.debian.org/debian-security-announce/2022/msg00057.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00006.html

best regards,
Marius Schwarz