Ubuntu 23.04, 22.04 LTS USN-6368-1 Moderate: Thunderbird DoS Threat

ubuntu

September 14, 2023

Several security issues were fixed in Thunderbird.

Summary

Several security issues were fixed in Thunderbird.

Software Description:

- thunderbird: Mozilla Open Source mail and newsgroup client

Details:

Multiple security issues were discovered in Thunderbird. If a user were

tricked into opening a specially crafted website in a browsing context, an

attacker could potentially exploit these to cause a denial of service,

obtain sensitive information, bypass security restrictions, cross-site

tracing, or execute arbitrary code. (CVE-2023-4573, CVE-2023-4574,

CVE-2023-4575, CVE-2023-4581, CVE-2023-4584)

It was discovered that Thunderbird did not properly manage memory when

handling WebP images. If a user were tricked into opening a malicious WebP

image file, an attacker could potentially exploit these to cause a denial

of service or execute arbitrary code. (CVE-2023-4863)

Topics Covered

security advisory denial of service code execution ubuntu thunderbird

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
  thunderbird                     1:102.15.1+build1-0ubuntu0.23.04.1

Ubuntu 22.04 LTS:
  thunderbird                     1:102.15.1+build1-0ubuntu0.22.04.1

Ubuntu 20.04 LTS:
  thunderbird                     1:102.15.1+build1-0ubuntu0.20.04.1

In general, a standard system update will make all the necessary changes.