DSA-5498: -1 thunderbird -- security update
Published Sep 15, 2023
·Updated
A buffer overflow in parsing WebP images may result in the execution of arbitrary code.
Affected Software
2 affected componentsFixes available
debian/thunderbird
debian/thunderbird
1:140.12.0esr-1~deb12u11:153.6.0esr-1~deb12u2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:140.12.0esr-1~deb12u1Fixed in 1:153.6.0esr-1~deb12u2 - Upgrade
Upgrade
thunderbirdto a version that resolves this vulnerability.Patch DSA-5498-1
Event History
Sep 15, 2023
Advisory Published
12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID for this security update?
The vulnerability ID for this security update is DSA-5498-1.
2
What software is affected by this vulnerability?
The Thunderbird package from the Debian source is affected by this vulnerability.
3
What is the impact of this vulnerability?
This vulnerability allows an attacker to execute arbitrary code.
4
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The CWE ID for this vulnerability is CWE-119.
5
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the Debian Security Tracker and DSA-5498.