Thunderbird 2.0.0.12 Cures Vulnerabilities
Following security fixes for Firefox, Camino & Co, the developers of the Thunderbird email client have now taken steps to remove known vulnerabilities, closing down five security holes, one of which was and classified as critical.
The update to Thunderbird version 2.0.0.12 removes the danger of buffer overflows caused by email attachments with MIME (Multipurpose Internet Message Extensions) encoding (MFSA 2008-12, original advisory by iDefense). The memory space allocated for this by Thunderbird was too small and the program was thus prone to buffer overflows. The potential attacker could exploit the vulnerability to execute arbitrary code.
One of the bugs already removed in the Firefox Web browser is described in MFSA 2008-01. It affected the browser engine and was capable of crashing the browser allowing an attacker to inject malicious code. Other advisories, MFSA 2008-07, MFSA 2008-05 and MFSA 2008-03, describe the other vulnerability that were removed.
Users of the email client are advised to update to the current version as soon as possible. The package can be downloaded from the project’s servers with packages expected from various distributors in the next few days.
Issue 266/2023
Buy this issue as a PDF
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters
Find SysAdmin Jobs
News
-
Xfce 4.18 is Coming Soon and Offers Subtle Improvements
The Xfce team has announced the release date of the next iteration of the desktop, which includes a good number of features to polish the fan-favorite Linux UI.
-
Orange Pi Board Has Arch-Based Linux Distribution in the Works
The developers of the Orange Pi board are planning to release an Arch-based Linux distribution available for its hardware as an alternative to Orange Pi OS.
-
Alpine Linux 3.17 Now Available to the General Public
The developers of Alpine Linux have officially announced the release of the latest version of the security-focused Linux distribution.
-
The New StarFighter Linux Laptop Now Available for Preorder
A new, completely customizable Linux laptop is now available to preorder from Star Labs.
-
Critical Escalation Vulnerability Found in the Linux Kernel
A new local privilege escalation vulnerability has been discovered in the Linux kernel and users are encouraged to upgrade/patch immediately.
-
AlmaLinux 8.7 Now Available
The developers of AlmaLinux have released the latest version of the OS, named Stone Smilodon, to the general public.
-
New Arch-Based Linux Distribution Aims to be Beginner-Friendly
CachyOS has been created to serve as a Linux distribution for everyone, even while being based on the more complex Arch Linux.
-
elementary OS 7 Getting Closer to Release
The team behind elementary OS has announced they are now focused on putting the finishing touches on the next major release of the Linux distribution.
-
Nitrux 2.5 Released with Kernel 6.0 and KDE Plasma 5.26
Nitrux 2.5 has been officially released and is the first systemd-free distribution to include both kernel 6.0 and KDE Plasma 5.26.
-
Zorin OS 16.02 Now Available
Zorin OS 16.2 has been officially released just seven months after the first point release of the user-friendly Linux operating system.