Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Ubuntu 21.04 USN-4995-1 Moderate: Thunderbird Multiple Threats Resolved

ubuntu
Calendar Grey June 22, 2021
Dist Ubuntu Esm H88
Multiple vulnerabilities addressed in Thunderbird for Ubuntu; features fixes for denial of service, remote code execution, and unauthorized data access.
Several security issues were fixed in Thunderbird.

Summary

Several security issues were fixed in Thunderbird.

Software Description:

- thunderbird: Mozilla Open Source mail and newsgroup client

Details:

Multiple security issues were discovered in Thunderbird. If a user were

tricked into opening a specially crafted website in a browsing context, an

attacker could potentially exploit these to cause a denial of service,

obtain sensitive information, spoof the UI, bypass security restrictions,

or execute arbitrary code. (CVE-2021-23961, CVE-2021-23981,

CVE-2021-23982, CVE-2021-23987, CVE-2021-23994, CVE-2021-23998,

CVE-2021-23999, CVE-2021-29945, CVE-2021-29946, CVE-2021-29967)

It was discovered that extensions could open popup windows with control

of the window title in some circumstances. If a user were tricked into

installing a specially crafted extension, an attacker could potentially

exploit this to spoof a website and trick the user into providing

credentials. (CVE-2021-23984)

Multiple security issues were disco...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service thunderbird email client malicious extension

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
  thunderbird                     1:78.11.0+build1-0ubuntu0.21.04.2

Ubuntu 20.10:
  thunderbird                     1:78.11.0+build1-0ubuntu0.20.10.2

Ubuntu 20.04 LTS:
  thunderbird                     1:78.11.0+build1-0ubuntu0.20.04.2

After a standard system update you need to restart Thunderbird to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4995-1

CVE-2021-23961, CVE-2021-23981, CVE-2021-23982, CVE-2021-23984,

CVE-2021-23987, CVE-2021-23991, CVE-2021-23992, CVE-2021-23993,

CVE-2021-23994, CVE-2021-23995, CVE-2021-23998, CVE-2021-23999,

CVE-2021-24002, CVE-2021-29945, CVE-2021-29946, CVE-2021-29948,

CVE-2021-29949, CVE-2021-29956, CVE-2021-29957, CVE-2021-29967

Severity
important
Lowest
Low
Medium
High
Critical

June 22, 2021

Topics%20covered

Topics Covered

security advisory denial of service thunderbird email client malicious extension

Package Information

https://launchpad.net/ubuntu/+source/thunderbird/1:78.11.0+build1-0ubuntu0.21.04.2
https://launchpad.net/ubuntu/+source/thunderbird/1:78.11.0+build1-0ubuntu0.20.10.2
https://launchpad.net/ubuntu/+source/thunderbird/1:78.11.0+build1-0ubuntu0.20.04.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here