Stay Secure with the Latest Linux Advisories

security advisorydenial of servicesecurity issue

Ubuntu 22.04 LTS Advisory 6903-1: Thunderbird Threats and Fixes

Several security issues were fixed in Thunderbird.. ========================================================================== Ubuntu Security Notice USN-6903-1 July 22, 2024 thunderbird vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in Thunderbird. Software Description: - thunderbird: Mozilla Open Source mail and newsgroup client Details: Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code. (CVE-2024-6600, CVE-2024-6601, CVE-2024-6604) Ronald Crane discovered that Thunderbird did not properly manage certain memory operations in the NSS. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-6602) Irvan Kurniawan discovered that Thunderbird did not properly manage memory during thread creation. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code. (CVE-2024-6603) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS thunderbird 1:115.13.0+build5-0ubuntu0.22.04.1 Ubuntu 20.04 LTS thunderbird 1:115.13.0+build5-0ubuntu0.20.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6903-1 CVE-2024-6600, CVE-2024-6601, CVE-2024-6602, CVE-2024-6603, CVE-2024-6604 Package Information: https://launchpad.net/ubuntu/+source/thunderbird/1:115.13.0+build5-0ubuntu0.22.04.1 https://launchpad.net/ubuntu/+source/thunderbird/1:115.13.0+build5-0ubuntu0.20.04.1 . Essential patches for Thunderbird vulnerabilities have been issued for Ubuntu 22.04 and 20.04 LTS. It's recommended to update promptly to ensure optimal system safety and performance.. Thunderbird Security Update, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS. . Severity: Critical. LinuxSecurity.com Team

Jul 22, 2024 •Critical Ubuntu