[SECURITY] [DLA 2930-1] thunderbird security update

2022-03-0110:19:03

lists.debian.org

thunderbird

out-of-bounds write

security update

debian 9

stretch

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

56.1%

JSON

Debian LTS Advisory DLA-2930-1 [email protected]
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
March 01, 2022 https://wiki.debian.org/LTS

Package : thunderbird
Version : 1:91.6.1-1~deb9u1
CVE ID : CVE-2022-0566

An out-of-bounds write was discovered in Thunderbird, which could
be triggered via a malformed email message.

For Debian 9 stretch, this problem has been fixed in version
1:91.6.1-1~deb9u1.

We recommend that you upgrade your thunderbird packages.

For the detailed security status of thunderbird please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/thunderbird

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian9allicedove-l10n-nl< 1:91.6.1-1~deb9u1icedove-l10n-nl_1:91.6.1-1~deb9u1_all.deb
Debian9allthunderbird-l10n-zh-tw< 1:91.6.1-1~deb9u1thunderbird-l10n-zh-tw_1:91.6.1-1~deb9u1_all.deb
Debian11allthunderbird-l10n-nb-no< 1:91.6.1-1~deb11u1thunderbird-l10n-nb-no_1:91.6.1-1~deb11u1_all.deb
Debian10allthunderbird-l10n-cy< 1:91.6.1-1~deb10u1thunderbird-l10n-cy_1:91.6.1-1~deb10u1_all.deb
Debian9alllightning-l10n-si< 1:91.6.1-1~deb9u1lightning-l10n-si_1:91.6.1-1~deb9u1_all.deb
Debian9alliceowl-l10n-ko< 1:91.6.1-1~deb9u1iceowl-l10n-ko_1:91.6.1-1~deb9u1_all.deb
Debian9allicedove-l10n-rm< 1:91.6.1-1~deb9u1icedove-l10n-rm_1:91.6.1-1~deb9u1_all.deb
Debian9alliceowl-l10n-nl< 1:91.6.1-1~deb9u1iceowl-l10n-nl_1:91.6.1-1~deb9u1_all.deb
Debian11allthunderbird-l10n-kab< 1:91.6.1-1~deb11u1thunderbird-l10n-kab_1:91.6.1-1~deb11u1_all.deb
Debian11allthunderbird-l10n-hu< 1:91.6.1-1~deb11u1thunderbird-l10n-hu_1:91.6.1-1~deb11u1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	all	icedove-l10n-nl	< 1:91.6.1-1~deb9u1	icedove-l10n-nl_1:91.6.1-1~deb9u1_all.deb
Debian	9	all	thunderbird-l10n-zh-tw	< 1:91.6.1-1~deb9u1	thunderbird-l10n-zh-tw_1:91.6.1-1~deb9u1_all.deb
Debian	11	all	thunderbird-l10n-nb-no	< 1:91.6.1-1~deb11u1	thunderbird-l10n-nb-no_1:91.6.1-1~deb11u1_all.deb
Debian	10	all	thunderbird-l10n-cy	< 1:91.6.1-1~deb10u1	thunderbird-l10n-cy_1:91.6.1-1~deb10u1_all.deb
Debian	9	all	lightning-l10n-si	< 1:91.6.1-1~deb9u1	lightning-l10n-si_1:91.6.1-1~deb9u1_all.deb
Debian	9	all	iceowl-l10n-ko	< 1:91.6.1-1~deb9u1	iceowl-l10n-ko_1:91.6.1-1~deb9u1_all.deb
Debian	9	all	icedove-l10n-rm	< 1:91.6.1-1~deb9u1	icedove-l10n-rm_1:91.6.1-1~deb9u1_all.deb
Debian	9	all	iceowl-l10n-nl	< 1:91.6.1-1~deb9u1	iceowl-l10n-nl_1:91.6.1-1~deb9u1_all.deb
Debian	11	all	thunderbird-l10n-kab	< 1:91.6.1-1~deb11u1	thunderbird-l10n-kab_1:91.6.1-1~deb11u1_all.deb
Debian	11	all	thunderbird-l10n-hu	< 1:91.6.1-1~deb11u1	thunderbird-l10n-hu_1:91.6.1-1~deb11u1_all.deb