Thunderbird 2.0.0.12 Cures Vulnerabilities
Following security fixes for Firefox, Camino & Co, the developers of the Thunderbird email client have now taken steps to remove known vulnerabilities, closing down five security holes, one of which was and classified as critical.
The update to Thunderbird version 2.0.0.12 removes the danger of buffer overflows caused by email attachments with MIME (Multipurpose Internet Message Extensions) encoding (MFSA 2008-12, original advisory by iDefense). The memory space allocated for this by Thunderbird was too small and the program was thus prone to buffer overflows. The potential attacker could exploit the vulnerability to execute arbitrary code.
One of the bugs already removed in the Firefox Web browser is described in MFSA 2008-01. It affected the browser engine and was capable of crashing the browser allowing an attacker to inject malicious code. Other advisories, MFSA 2008-07, MFSA 2008-05 and MFSA 2008-03, describe the other vulnerability that were removed.
Users of the email client are advised to update to the current version as soon as possible. The package can be downloaded from the project’s servers with packages expected from various distributors in the next few days.
Issue 248/2021
Buy this issue as a PDF
News
-
Nvidia and Valve Collaborate to Bring DLSS to Linux
Both powerhouses in the gaming industry are trying to make the experience on Linux much improved, by way of DLSS.
-
Kali Linux 2021.2 Official Release Now Available
The latest iteration of security fan-favorite Kali Linux has been released with new tools, themes, and plenty of improvements.
-
Entroware Unleashes a Beast of a Linux Laptop
If you're looking for a portable workhorse, look no further than the Entroware Proteus laptop.
-
System76 Unveils its “Launch” Keyboard
The open-source darling, System76, is about to launch the Launch keyboard and you can pre-order yours now.
-
Armbian 21.05 Now Available
The Armbian developers have released the latest update to the Debian-based Linux distribution geared for ARM and embedded devices.
-
StarLabs has Released Another Linux Laptop
A new 14" Linux laptop has been released by the company that created the 11" Star Lite and can be purchased with your choice of Linux distribution.
-
Ubuntu 21.04 Adds Support for Active Directory and Other Major Changes
In a bid to help make Linux more viable for the business desktop, Canonical adds support for Active Directory and a few other notable changes.
-
GNOME 40 Available on openSUSE
The rolling release edition of openSUSE, Tumbleweed, now offers the latest version of the GNOME desktop.
-
Apple M1 Hardware Support to be Merged into Linux Kernel 5.13
Linux users will be able to install their favorite distribution on Apple’s M1-based hardware.
-
KDE Launches the Qt 5 Patch Collection
To support and maintain a stable Qt 5 for KDE Gears and Frameworks, KDE will maintain a patch collection.