Ubuntu 12.04 LTS USN-1551-2 Moderate: Thunderbird Message Editor Problem

ubuntu

September 28, 2012

USN-1551-1 introduced regressions in Thunderbird.

Summary

USN-1551-1 introduced regressions in Thunderbird.

Software Description:

- thunderbird: Mozilla Open Source mail and newsgroup client

Details:

USN-1551-1 fixed vulnerabilities in Thunderbird. The new package caused a

regression in the message editor and certain performance regressions as

well. This update fixes the problems.

Original advisory details:

Gary Kwong, Christian Holler, Jesse Ruderman, Steve Fink, Bob Clary, Andrew

Sutherland, Jason Smith, John Schoenick, Vladimir Vukicevic and Daniel

Holbert discovered memory safety issues affecting Thunderbird. If the user

were tricked into opening a specially crafted E-Mail, an attacker could

exploit these to cause a denial of service via application crash, or

potentially execute code with the privileges of the user invoking

Thunderbird. (CVE-2012-1970, CVE-2012-1971)

Abhishek Arya discovered multiple use-after-free vulnerabilities. If the

user were tricked into opening a specially crafted E-Mail,...

Read the Full Advisory

Topics Covered

security advisory denial of service ubuntu thunderbird message editor

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  thunderbird                     15.0.1+build1-0ubuntu0.12.04.1
  thunderbird-globalmenu          15.0.1+build1-0ubuntu0.12.04.1

Ubuntu 11.10:
  thunderbird                     15.0.1+build1-0ubuntu0.11.10.1
  thunderbird-globalmenu          15.0.1+build1-0ubuntu0.11.10.1

Ubuntu 11.04:
  thunderbird                     15.0.1+build1-0ubuntu0.11.04.1
  thunderbird-globalmenu          15.0.1+build1-0ubuntu0.11.04.1

Ubuntu 10.04 LTS:
  thunderbird                     15.0.1+build1-0ubuntu0.10.04.1

After a standard system update you need to restart Thunderbird to make
all the necessary changes.