Ubuntu 18.10: USN-3868-1 Critical: Thunderbird Denial of Service

ubuntu

January 24, 2019

Several security issues were fixed in Thunderbird.

Summary

Several security issues were fixed in Thunderbird.

Software Description:

- thunderbird: Mozilla Open Source mail and newsgroup client

Details:

Multiple security issues were discovered in Thunderbird. If a user were

tricked in to opening a specially crafted website in a browsing context,

an attacker could potentially exploit these to cause a denial of service,

bypass same-origin restrictions, or execute arbitrary code.

Topics Covered

security advisory denial of service software update arbitrary code execution ubuntu thunderbird

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  thunderbird                     1:60.4.0+build2-0ubuntu0.18.10.1

Ubuntu 18.04 LTS:
  thunderbird                     1:60.4.0+build2-0ubuntu0.18.04.1

Ubuntu 16.04 LTS:
  thunderbird                     1:60.4.0+build2-0ubuntu0.16.04.1

Ubuntu 14.04 LTS:
  thunderbird                     1:60.4.0+build2-0ubuntu0.14.04.1

After a standard system update you need to restart Thunderbird to make
all the necessary changes.