Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Ubuntu 11.10: USN-1400-4 Moderate: Thunderbird Regression Fix

ubuntu
Calendar Grey April 3, 2012
Scroller Ubuntu
Resolve Thunderbird issues with Ubuntu patch USN-1400-4 to boost performance and ensure optimal functionality for your email experience
USN-1400-3 introduced regressions in Thunderbird.

Summary

USN-1400-3 introduced regressions in Thunderbird.

Software Description:

- thunderbird: Mozilla Open Source mail and newsgroup client

Details:

USN-1400-3 fixed vulnerabilities in Thunderbird. The new Thunderbird

version caused a regression in IMAP connections and mail filtering. This

update fixes the problem.

Original advisory details:

Soroush Dalili discovered that Firefox did not adequately protect against

dropping JavaScript links onto a frame. A remote attacker could, through

cross-site scripting (XSS), exploit this to modify the contents or steal

confidential data. (CVE-2012-0455)

Atte Kettunen discovered a use-after-free vulnerability in Firefox's

handling of SVG animations. An attacker could potentially exploit this to

execute arbitrary code with the privileges of the user invoking Firefox.

(CVE-2012-0457)

Atte Kettunen discovered an out of bounds read vulnerability in Firefox's

handling of SVG Filters. An attacker could potentially...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory software update ubuntu thunderbird regression issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  thunderbird                     11.0.1+build1-0ubuntu0.11.10.1

After a standard system update you need to restart Thunderbird to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1400-4

https://ubuntu.com/security/notices/USN-1400-1

https://ubuntu.com/security/notices/USN-1400-3, https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/962631

April 03, 2012

Topics%20covered

Topics Covered

security advisory software update ubuntu thunderbird regression issue

Package Information

https://launchpad.net/ubuntu/+source/thunderbird/11.0.1+build1-0ubuntu0.11.10.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.