Ubuntu Security Notice USN-7066-1
2024-10-14 21:34:26 Author: packetstormsecurity.com(查看原文) 阅读量:0 收藏

==========================================================================
Ubuntu Security Notice USN-7066-1
October 14, 2024

thunderbird vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

Thunderbird could be made to crash or run programs if it opened a specially
crafted file.

Software Description:
- thunderbird: Mozilla Open Source mail and newsgroup client

Details:

Damien Schaeffer discovered that Thunderbird did not properly manage
certain memory operations when processing content in the Animation
timelines. An attacker could potentially exploit this issue to achieve
arbitrary code execution.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
thunderbird 1:115.16.0+build2-0ubuntu0.22.04.1

Ubuntu 20.04 LTS
thunderbird 1:115.16.0+build2-0ubuntu0.20.04.1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-7066-1
CVE-2024-9680

Package Information:
https://launchpad.net/ubuntu/+source/thunderbird/1:115.16.0+build2-0ubuntu0.22.04.1
https://launchpad.net/ubuntu/+source/thunderbird/1:115.16.0+build2-0ubuntu0.20.04.1


文章来源: https://packetstormsecurity.com/files/182175/USN-7066-1.txt
如有侵权请联系:admin#unsafe.sh