Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Slackware 12.0 Critical: 2008-061-01 Mozilla-Thunderbird Remote Exec

slackware
Calendar Grey March 1, 2008
Scroller Slackware
Updated mozilla-thunderbird bundles can now be found for Slackware, aimed at resolving serious security vulnerabilities. Ensure you update to maintain your protection.
New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, and -current to fix security issues

Summary

Here are the details from the Slackware 12.0 ChangeLog: patches/packages/mozilla-thunderbird-2.0.0.12-i686-1.tgz: Upgraded to thunderbird-2.0.0.12. This update fixes the following security related issues: MFSA 2008-12: Heap buffer overflow in external MIME bodies MFSA 2008-05: Directory traversal via chrome: URI MFSA 2008-03: Privilege escalation, XSS, Remote Code Execution MFSA 2008-01: Crashes with evidence of memory corruption (rv:1.8.1.12) For more information, see: https://www.mozilla.org/en-US/security/advisories/mfsa2008-12/ https://www.mozilla.org/en-US/security/advisories/mfsa2008-05/ https://www.mozilla.org/en-US/security/advisories/mfsa2008-03/ https://www.mozilla.org/en-US/security/advisories/mfsa2008-01/ These are the related CVE entries: https://www.cve.org/CVERecord?id=CVE-2008-0304 https://www.cve.org/CVERecord?id=CVE-2008-0418 https://www.cve.org/CVERecord?id=CVE-2008-0415

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security update buffer overflow critical remote code execution slackware mozilla-thunderbird

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 10.2:
Updated package for Slackware 11.0:
Updated package for Slackware 12.0:
Updated package for Slackware -current:

MD5 Signatures

Slackware 10.2 package: 0c5bfc8c508e128b13c88311a6889879 mozilla-thunderbird-2.0.0.12-i686-1.tgz
Slackware 11.0 package: 0c5bfc8c508e128b13c88311a6889879 mozilla-thunderbird-2.0.0.12-i686-1.tgz
Slackware 12.0 package: 0c5bfc8c508e128b13c88311a6889879 mozilla-thunderbird-2.0.0.12-i686-1.tgz
Slackware -current package: 0c5bfc8c508e128b13c88311a6889879 mozilla-thunderbird-2.0.0.12-i686-1.tgz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory security update buffer overflow critical remote code execution slackware mozilla-thunderbird

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg mozilla-thunderbird-2.0.0.12-i686-1.tgz