Ubuntu 3997-1 Security Notice: Thunderbird Critical Issues Resolved

ubuntu

May 28, 2019

Several security issues were fixed in Thunderbird.

Summary

Several security issues were fixed in Thunderbird.

Software Description:

- thunderbird: Mozilla Open Source mail and newsgroup client

Details:

Multiple security issues were discovered in Thunderbird. If a user were

tricked in to opening a specially crafted website in a browsing context,

an attacker could potentially exploit these to cause a denial of service,

bypass same-origin protections, or execute arbitrary code.

(CVE-2019-18511, CVE-2019-11691, CVE-2019-11692, CVE-2019-11693,

CVE-2019-9797, CVE-2019-9800, CVE-2019-9817, CVE-2019-9819, CVE-2019-9820)

Multiple security issues were discovered in Thunderbird. If a user were

tricked in to opening a specially crafted message, an attacker could

potentially exploit these to cause a denial of service, or execute

arbitrary code. (CVE-2019-5798, CVE-2019-7317)

A type confusion bug was discovered with object groups and UnboxedObjects.

If a user were tricked in to opening a specially crafted website in a

browsing...

Read the Full Advisory

Topics Covered

security advisory denial of service security issue arbitrary code execution Ubuntu Thunderbird bypass protections

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  thunderbird                     1:60.7.0+build1-0ubuntu0.19.04.1

Ubuntu 18.10:
  thunderbird                     1:60.7.0+build1-0ubuntu0.18.10.1

Ubuntu 18.04 LTS:
  thunderbird                     1:60.7.0+build1-0ubuntu0.18.04.1

Ubuntu 16.04 LTS:
  thunderbird                     1:60.7.0+build1-0ubuntu0.16.04.1

After a standard system update you need to restart Thunderbird to make
all the necessary changes.