[SECURITY] [DLA 2416-1] thunderbird security update

2020-10-2707:43:17

lists.debian.org

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.8%

JSON

Debian LTS Advisory DLA-2416-1 [email protected]
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
October 27, 2020 https://wiki.debian.org/LTS

Package : thunderbird
Version : 1:78.4.0-1~deb9u1
CVE ID : CVE-2020-15683 CVE-2020-15969

Multiple security issues have been found in Thunderbird, which may lead
to the execution of arbitrary code or denial of service.

For Debian 9 stretch, these problems have been fixed in version
1:78.4.0-1~deb9u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian10alliceweasel-l10n-nl< 1:78.4.0esr-1~deb10u2iceweasel-l10n-nl_1:78.4.0esr-1~deb10u2_all.deb
Debian9alliceweasel-l10n-ca< 1:78.4.0esr-1~deb9u1iceweasel-l10n-ca_1:78.4.0esr-1~deb9u1_all.deb
Debian10alliceweasel-l10n-pt-br< 1:78.4.0esr-1~deb10u2iceweasel-l10n-pt-br_1:78.4.0esr-1~deb10u2_all.deb
Debian10allthunderbird-l10n-id< 1:78.4.0-1~deb10u1thunderbird-l10n-id_1:78.4.0-1~deb10u1_all.deb
Debian10alllightning-l10n-ga-ie< 1:78.4.0-1~deb10u1lightning-l10n-ga-ie_1:78.4.0-1~deb10u1_all.deb
Debian9alllightning-l10n-fr< 1:78.4.0-1~deb9u1lightning-l10n-fr_1:78.4.0-1~deb9u1_all.deb
Debian10i386thunderbird< 1:78.4.0-1~deb10u1thunderbird_1:78.4.0-1~deb10u1_i386.deb
Debian10alliceweasel-l10n-lt< 1:78.4.0esr-1~deb10u2iceweasel-l10n-lt_1:78.4.0esr-1~deb10u2_all.deb
Debian9allfirefox-esr-l10n-gl< 78.4.0esr-1~deb9u1firefox-esr-l10n-gl_78.4.0esr-1~deb9u1_all.deb
Debian9allthunderbird-l10n-nn-no< 1:78.4.0-1~deb9u1thunderbird-l10n-nn-no_1:78.4.0-1~deb9u1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	10	all	iceweasel-l10n-nl	< 1:78.4.0esr-1~deb10u2	iceweasel-l10n-nl_1:78.4.0esr-1~deb10u2_all.deb
Debian	9	all	iceweasel-l10n-ca	< 1:78.4.0esr-1~deb9u1	iceweasel-l10n-ca_1:78.4.0esr-1~deb9u1_all.deb
Debian	10	all	iceweasel-l10n-pt-br	< 1:78.4.0esr-1~deb10u2	iceweasel-l10n-pt-br_1:78.4.0esr-1~deb10u2_all.deb
Debian	10	all	thunderbird-l10n-id	< 1:78.4.0-1~deb10u1	thunderbird-l10n-id_1:78.4.0-1~deb10u1_all.deb
Debian	10	all	lightning-l10n-ga-ie	< 1:78.4.0-1~deb10u1	lightning-l10n-ga-ie_1:78.4.0-1~deb10u1_all.deb
Debian	9	all	lightning-l10n-fr	< 1:78.4.0-1~deb9u1	lightning-l10n-fr_1:78.4.0-1~deb9u1_all.deb
Debian	10	i386	thunderbird	< 1:78.4.0-1~deb10u1	thunderbird_1:78.4.0-1~deb10u1_i386.deb
Debian	10	all	iceweasel-l10n-lt	< 1:78.4.0esr-1~deb10u2	iceweasel-l10n-lt_1:78.4.0esr-1~deb10u2_all.deb
Debian	9	all	firefox-esr-l10n-gl	< 78.4.0esr-1~deb9u1	firefox-esr-l10n-gl_78.4.0esr-1~deb9u1_all.deb
Debian	9	all	thunderbird-l10n-nn-no	< 1:78.4.0-1~deb9u1	thunderbird-l10n-nn-no_1:78.4.0-1~deb9u1_all.deb