[USN-5132-1] Thunderbird vulnerabilities
Chris Coulson
chris.coulson at canonical.com
Wed Nov 3 22:50:02 UTC 2021
==========================================================================
Ubuntu Security Notice USN-5132-1
November 03, 2021
thunderbird vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 21.10
Summary:
Several security issues were fixed in Thunderbird.
Software Description:
- thunderbird: Mozilla Open Source mail and newsgroup client
Details:
Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context, an
attacker could potentially exploit these to cause a denial of service,
spoof another origin, or execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 21.10:
thunderbird 1:91.2.1+build1-0ubuntu0.21.10.1
After a standard system update you need to restart Thunderbird to make
all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5132-1
CVE-2021-32810, CVE-2021-38496, CVE-2021-38497, CVE-2021-38498,
CVE-2021-38500, CVE-2021-38501
Package Information:
https://launchpad.net/ubuntu/+source/thunderbird/1:91.2.1+build1-0ubuntu0.21.10.1
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20211103/60ba2f0f/attachment.sig>
More information about the ubuntu-security-announce
mailing list