|Category:||Debian Local Security Checks|
|Title:||Debian LTS Advisory ([SECURITY] [DLA 1575-1] thunderbird security update)|
|Summary:||Multiple security issues have been found in Thunderbird: Multiple memory;safety errors and use-after-frees may lead to the execution of arbitrary;code or denial of service.;;Debian follows the Thunderbird upstream releases. Support for the 52.x;series has ended, so starting with this update we're now following the;60.x releases.;;Between 52.x and 60.x, Thunderbird has undergone significant internal;updates, which makes it incompatible with a number of extensions. Please;see the references for more information.|
Multiple security issues have been found in Thunderbird: Multiple memory
safety errors and use-after-frees may lead to the execution of arbitrary
code or denial of service.
Debian follows the Thunderbird upstream releases. Support for the 52.x
series has ended, so starting with this update we're now following the
Between 52.x and 60.x, Thunderbird has undergone significant internal
updates, which makes it incompatible with a number of extensions. Please
see the references for more information.
Thunderbird is an mail client suitable for free distribution. The goal of
Thunderbird is to produce a cross platform stand-alone mail application using
the XUL user interface language.
It supports different mail accounts, no matter of the used protocol like
POP(s) or IMAP(s), has an integrated learning Spam filter, and offers easy
organization of mails with tagging and virtual folders. Also, more features
can be added by installing extensions.
thunderbird on Debian Linux
For Debian 8 'Jessie', these problems have been fixed in version
We recommend that you upgrade your thunderbird packages.
Common Vulnerability Exposure (CVE) ID: CVE-2018-5156|
Debian Security Information: DSA-4235 (Google Search)
Debian Security Information: DSA-4295 (Google Search)
RedHat Security Advisories: RHSA-2018:2112
RedHat Security Advisories: RHSA-2018:2113
BugTraq ID: 104560
Common Vulnerability Exposure (CVE) ID: CVE-2018-5187
BugTraq ID: 104556
|Copyright||Copyright (c) 2018 Greenbone Networks GmbH http://greenbone.net|
|This is only one of 71225 vulnerability tests in our test suite. Find out more about running a complete security audit.|
To run a free test of this vulnerability against your system, register below.