USN-4028-1: Thunderbird vulnerabilities

Releases

• Ubuntu 19.04
• Ubuntu 18.10
• Ubuntu 18.04 ESM
• Ubuntu 16.04 ESM

Packages

• thunderbird - Mozilla Open Source mail and newsgroup client

Details

Multiple memory safety issues were discovered in Thunderbird. If a user
were tricked in to opening a specially crafted message, an attacker could
potentially exploit these to cause a denial of service, or execute
arbitrary code.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 19.04

• thunderbird - 1:60.7.1+build1-0ubuntu0.19.04.1

Ubuntu 18.10

• thunderbird - 1:60.7.1+build1-0ubuntu0.18.10.1

Ubuntu 18.04

• thunderbird - 1:60.7.1+build1-0ubuntu0.18.04.1

Ubuntu 16.04

• thunderbird - 1:60.7.1+build1-0ubuntu0.16.04.1

After a standard system update you need to restart Thunderbird to make
all the necessary changes.

References

• CVE-2019-11703
• CVE-2019-11704
• CVE-2019-11705
• CVE-2019-11706