Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

Debian 8: DLA-1575-1 Moderate: Thunderbird Code Execution Risks

debian lts
Calendar Grey November 12, 2018
Dist Debian Esm H88
Numerous vulnerabilities identified in Thunderbird which could result in possible arbitrary command execution or service interruption. Update advised.
Multiple security issues have been found in Thunderbird: Multiple memory safety errors and use-after-frees may lead to the execution of arbitrary code or denial of service
Topics%20covered

Topics Covered

security advisory software update code execution debian arbitrary code thunderbird memory safety

Summary

Between 52.x and 60.x, Thunderbird has undergone significant internal
updates, which makes it incompatible with a number of extensions. For
more information please refer to
https://support.mozilla.org/en-US/kb/new-thunderbird-60

For Debian 8 "Jessie", these problems have been fixed in version
1:60.3.0-1~deb8u1.

We recommend that you upgrade your thunderbird packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
important
Lowest
Low
Medium
High
Critical

Package: thunderbird
Version: 1:60.3.0-1~deb8u1
CVE ID: CVE-2017-16541 CVE-2018-5156 CVE-2018-5187 CVE-2018-12361

Topics%20covered

Topics Covered

security advisory software update code execution debian arbitrary code thunderbird memory safety

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.