Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia: MGASA-2021-0427 Moderate: Thunderbird Memory Corruption Threat

mageia
Calendar Grey September 23, 2021
Dist Mageia Esm H88
Latest Thunderbird updates address vulnerabilities related to memory integrity on Mageia. Release date: 23 Sep 2021.
Mozilla developers Tyson Smith and Gabriele Svelto reported memory safety bugs present in Thunderbird ESR 78.13

Summary

Mozilla developers Tyson Smith and Gabriele Svelto reported memory safety bugs present in Thunderbird ESR 78.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code (CVE-2021-38493).
The thunderbird package has been updated to the 91 branch. See the upstream release notes for details.

References

- https://bugs.mageia.org/show_bug.cgi?id=29378

- https://www.mozilla.org/en-US/security/advisories/mfsa2021-42/

- https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/

- https://www.thunderbird.net/en-US/thunderbird/91.0.1/releasenotes/

- https://www.thunderbird.net/en-US/thunderbird/91.0.2/releasenotes/

- https://www.thunderbird.net/en-US/thunderbird/91.0.3/releasenotes/

- https://www.thunderbird.net/en-US/thunderbird/91.1.0/releasenotes/

- https://www.thunderbird.net/en-US/thunderbird/91.1.1/releasenotes/

- https://access.redhat.com/errata/RHSA-2021:3494

- https://bugs.mageia.org/show_bug.cgi?id=29471

- https://www.cve.org/CVERecord?id=CVE-2021-38493

Topics%20covered

Topics Covered

security advisory security update moderate severity arbitrary code memory issue Thunderbird Mageia

Resolution

SRPMS

- 8/core/thunderbird-91.1.1-1.mga8

- 8/core/thunderbird-l10n-91.1.1-1.mga8

Publication date: 23 Sep 2021
URL: https://advisories.mageia.org/MGASA-2021-0427.html
Type: security
CVE: CVE-2021-38493

Topics%20covered

Topics Covered

security advisory security update moderate severity arbitrary code memory issue Thunderbird Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here