Security Update for Thunderbird
Summary
DLA-3817-1: thunderbird - security update. Affects thunderbird versions < 1:115.11.0-1~deb10u1. Fixed in 1:115.11.0-1~deb10u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Thunderbird is an open-source email client developed by Mozilla. It provides a range of features for managing emails, contacts, and calendars. The Debian 10 version of Thunderbird is affected by a security vulnerability.
Vulnerability Detail
The vulnerability (CVE-2024-4367, CVE-2024-4767, CVE-2024-4768, CVE-2024-4769, CVE-2024-4770, CVE-2024-4777) in Thunderbird allows remote attackers to execute arbitrary code or cause a denial of service. The specific technical details of the vulnerability have not been disclosed.
How To Fix
Minimum fixed version
1:115.11.0-1~deb10u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade thunderbirdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
The Thunderbird package in Debian 10 is affected by a security vulnerability that allows remote code execution or denial of service. It is recommended to update Thunderbird to version 1:115.11.0-1~deb10u1 or later to fix the vulnerability. For more information and support, please contact DevNack.com.
See every vulnerability recorded for thunderbird →
FAQ
Thunderbird is an open-source email client developed by Mozilla.
The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service.
No specific exploits have been disclosed for this vulnerability.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your Thunderbird installation is affected by this vulnerability.
For further support on vulnerability remediation, you can contact info@devnack.com.
Related vulnerabilities
Recent vulnerabilities recorded for thunderbird.
