Sécurité informatique

SECURINFOS.INFO - Bulletins de sécurité informatique, Alertes et Protection

Ubuntu : mise à jour pour mozilla-thunderbird

24/10/2007 12H05
Référence Secunia : SA27383 
Date de publication : 2007-10-24

Risque : Elevé. Niveau 4 sur 5.
Impact : Cross Site Scripting, Spoofing, Manipulation de données, Exposition de données sensibles, DoS, Accès au système
Lieu : A distance


Solutions :
Correctif de l'éditeur

OS :
Ubuntu Linux 6.06
Ubuntu Linux 6.10
Ubuntu Linux 7.04
Ubuntu Linux 7.10

Référence CVE :
CVE-2007-5340


Description :
Ubuntu a réalisé une mise à jour pour mozilla-thunderbird. Cela corrige une faiblesse et quelques vulnérabilités, qui pourraient être exploitées par des personnes malintentionnées pour conduire des attaques cross-site scripting et des attaques par spoofing, manipuler certaines données, expose des informations sensibles, ou compromettre le système d'un utilisateur.


Solutions :
Appliquez les paquetages mis à jour.

-- Ubuntu 6.06 LTS --

Archives sources :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.6.06.diff.gz
Taille/MD5: 455375 faa09532449603dddf8f08ab675d1b28
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.6.06.dsc
Taille/MD5: 1633 716dc01b46f55b7045db497ecf871874
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b.orig.tar.gz
Taille/MD5: 37228621 d17ccd750ecbb20cb3413a76d3b9aae9

Architecture AMD64 (Athlon64, Opteron, EM64T Xeon) : :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_amd64.deb
Taille/MD5: 3589076 51438f61eae1815349044e7cfc4dd664
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_amd64.deb
Taille/MD5: 194480 1470536e4f9b3bbcf92b956c68ab4d8e
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_amd64.deb
Taille/MD5: 59714 db759c01b3f5ecdb496d719db147ec74
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_amd64.deb
Taille/MD5: 12101388 21d24eb29519199dc19cedf9bca46eb6

Architecture i386 (Intel/AMD compatible x86) : :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_i386.deb
Taille/MD5: 3581470 e17577b8af7238161c7831e1ecfecc5a
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_i386.deb
Taille/MD5: 187860 cc5dd9051e827a8eeb874dc0519d44a7
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_i386.deb
Taille/MD5: 55236 882bd94d3e51324668a541794a9689d3
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_i386.deb
Taille/MD5: 10377152 edcf5e8407c40cbc27b62d98db297aac

Architecture PowerPC (Apple Macintosh G3/G4/G5) : :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_powerpc.deb
Taille/MD5: 3587070 adbd64b3bb6f85203d4b075c5304ccfa
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_powerpc.deb
Taille/MD5: 191194 41408b0d34b0bd0a1b919ea7af516b63
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_powerpc.deb
Taille/MD5: 58828 9451eccd032a26b915214e5e644f3d54
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_powerpc.deb
Taille/MD5: 11654878 8973a98920d27c367cdffeeeed2c07ac

Architecture sparc (Sun SPARC/UltraSPARC) : :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_sparc.deb
Taille/MD5: 3583334 57003876e1b00085ff70ed60f4d8450c
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_sparc.deb
Taille/MD5: 188650 3c42ca5fd35b149d8f02832c5cdc1bb6
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_sparc.deb
Taille/MD5: 56726 ae5f8045618af4b30ba64d539554eec7
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.6.06_sparc.deb
Taille/MD5: 10850460 0d23999e44719bfda650855aa0abda4b

-- Ubuntu 6.10 --

Archives sources :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.6.10.diff.gz
Taille/MD5: 456289 fbff6f4a38782775d86001752db48e79
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.6.10.dsc
Taille/MD5: 1631 8ed4674213d59fa99f7659b6d80368a0
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b.orig.tar.gz
Taille/MD5: 37228621 d17ccd750ecbb20cb3413a76d3b9aae9

Architecture AMD64 (Athlon64, Opteron, EM64T Xeon) : :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_amd64.deb
Taille/MD5: 3588932 45bf673232ae2168d251257c2834ecbc
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_amd64.deb
Taille/MD5: 194632 e37ccf86d3fcd9f29d08f2f204520d8b
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_amd64.deb
Taille/MD5: 59750 9dd3e401e0861bec20513f4999ff9c9c
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_amd64.deb
Taille/MD5: 12099034 811de96627c75c24bc018e6c6a3216e2

Architecture i386 (Intel/AMD compatible x86) : :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_i386.deb
Taille/MD5: 3585342 77c28d7972ce69adc29aee2397ff290f
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_i386.deb
Taille/MD5: 189282 1a40dc4fd814d0e0b1cac4f4bbfb5c0c
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_i386.deb
Taille/MD5: 56374 2905363391284cd15372c561afa58c84
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_i386.deb
Taille/MD5: 10835860 1d5f09005f41d82b1fc8de6bbbbc704e

Architecture PowerPC (Apple Macintosh G3/G4/G5) : :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_powerpc.deb
Taille/MD5: 3587416 4fb0627eb34ede9cdef222ac6922f864
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_powerpc.deb
Taille/MD5: 191710 e861aa2ac24b002c3d8d09d92361b479
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_powerpc.deb
Taille/MD5: 59456 e7730e5281e7a1497dc7acc33cbafbd7
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_powerpc.deb
Taille/MD5: 11786868 5d30ff59c7a79180e44ceede748cfe2b

Architecture sparc (Sun SPARC/UltraSPARC) : :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_sparc.deb
Taille/MD5: 3583440 ba60a3479ae70b4676bd4b6dd0969550
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_sparc.deb
Taille/MD5: 189126 f341629f11ab148821df03bfb9040776
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_sparc.deb
Taille/MD5: 56804 94062fed37c885f973f5b88bc1f8ff32
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.6.10_sparc.deb
Taille/MD5: 11051394 4abf064bc37a5fc70cccbe2a151fef43

-- Ubuntu 7.04 --

Archives sources :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.7.04.diff.gz
Taille/MD5: 126869 8dc57ffb89831b4dc66c4f051aa57f95
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.7.04.dsc
Taille/MD5: 1631 c7f6fce58ec18bb5723778b59178bc7a
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b.orig.tar.gz
Taille/MD5: 37228621 d17ccd750ecbb20cb3413a76d3b9aae9

Architecture AMD64 (Athlon64, Opteron, EM64T Xeon) : :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_amd64.deb
Taille/MD5: 3589658 27b9d5fdce9cfe126752bd7859e8308a
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_amd64.deb
Taille/MD5: 195102 2fea377df032d8ce1c930a5e954748e6
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_amd64.deb
Taille/MD5: 60238 755f612bbb949646e750d1618924d02d
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_amd64.deb
Taille/MD5: 12192262 a1568e41e6dbff1116aceb7c67fe9158

Architecture i386 (Intel/AMD compatible x86) : :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_i386.deb
Taille/MD5: 3586226 a2cb8a7f7d47c7c5f0f56d2c212cc12f
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_i386.deb
Taille/MD5: 189754 fba57a9700197d65dcc3699d1ed037f2
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_i386.deb
Taille/MD5: 56852 116efc9a033f033f270654fe3b23ea3b
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_i386.deb
Taille/MD5: 10922872 75967a89ffbd394a0273d03705b48301

Architecture PowerPC (Apple Macintosh G3/G4/G5) : :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_powerpc.deb
Taille/MD5: 3590366 a0683d32f537dba7e0a4377ebd403e59
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_powerpc.deb
Taille/MD5: 193248 a6428c169a03e2546a8d7fa9995a099a
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_powerpc.deb
Taille/MD5: 60234 1dec455cf1e883cdb37ea1568c6fb8e6
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_powerpc.deb
Taille/MD5: 12138012 34e24e0295304b4a8df6f0a2cdc63213

Architecture sparc (Sun SPARC/UltraSPARC) : :

http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-dev_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_sparc.deb
Taille/MD5: 3585084 53d581a08ada5f8f64947c1d36a468c4
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-inspector_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_sparc.deb
Taille/MD5: 189580 3b4486fd86b0b30328ba510b062f3447
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird-typeaheadfind_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_sparc.deb
Taille/MD5: 57290 0cded8c0cf68745a01124184a1b2687e
http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozilla-thunderbird_1.5.0.13+1.5.0.14b-0ubuntu0.7.04_sparc.deb
Taille/MD5: 11152460 1fc1f96a648a553ee45affa8eedd7885

-- Ubuntu 7.10 --

Archives sources :

http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10.diff.gz
Taille/MD5: 125259 4f889da5270b094f4ddb87561be82d37
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10.dsc
Taille/MD5: 1856 3c1acdf646f5a9d1f081ad01022cff2b
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_2.0.0.8~pre071022+nobinonly.orig.tar.gz
Taille/MD5: 35014336 23abe29e46bad10f874cfbc8380db2ef

Paquetages indépendants de l'architecture :

http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thunderbird-dev_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_all.deb
Taille/MD5: 59810 d2c94c734ce828be7d96423b755075fd
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thunderbird_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_all.deb
Taille/MD5: 59796 ff876515c1b37974d15c292bd5fd5eb8

Architecture AMD64 (Athlon64, Opteron, EM64T Xeon) : :

http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird-dev_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_amd64.deb
Taille/MD5: 3770448 a931fcffe4748f8807a14f27de636958
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird-gnome-support_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_amd64.deb
Taille/MD5: 84916 9fd78bd9ae0447e0b6306dd8edf37015
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_amd64.deb
Taille/MD5: 12390206 88606b14790bd6b2fa5acf6ef90aab99

Architecture i386 (Intel/AMD compatible x86) : :

http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird-dev_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_i386.deb
Taille/MD5: 3759064 2923f86da6f4d86baec8dde4293618b0
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird-gnome-support_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_i386.deb
Taille/MD5: 80272 f27201c2d4becd2326e07cae825d547a
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_i386.deb
Taille/MD5: 10964382 4bff0c2913d6dcbaadb730701de18f08

Architecture PowerPC (Apple Macintosh G3/G4/G5) : :

http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird-dev_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_powerpc.deb
Taille/MD5: 3773776 f22345e3f7838c96077a703d9c087bc6
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird-gnome-support_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_powerpc.deb
Taille/MD5: 83268 5e83d783ce3175956186722d45544eee
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_powerpc.deb
Taille/MD5: 12237922 21afdb04b647c76f3c2474adce0fd1a6

Architecture sparc (Sun SPARC/UltraSPARC) : :

http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird-dev_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_sparc.deb
Taille/MD5: 3755566 9491b1ae1db67968ba94075284708b66
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird-gnome-support_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_sparc.deb
Taille/MD5: 79672 00eecd245a7667c985135a2c53aa9f9c
http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_2.0.0.8~pre071022+nobinonly-0ubuntu0.7.10_sparc.deb
Taille/MD5: 11233884 8652b25a70b2844be0ab3aa5f3480cb6

Référence :
https://lists.ubuntu.com/archives/ubuntu-security-announce/2007-Octobre/000615.html


Autres références :

SA20442:
http://secunia.com/advisories/20442/

SA25904:
http://secunia.com/advisories/25904/

SA27311:
http://secunia.com/advisories/27311/

SA27313:
http://secunia.com/advisories/27313/




Veuillez noter : L'information sur laquelle ce bulletin Secunia est basé provient d'un tiers sans mention du contraire. Secunia collecte, valide, et vérifie tout les rapports de vulnérabilité issus de la recherche en sécurité de groupes, distributeurs ou autres.

Les noms, marques et enseignes cités sur ce site sont la propriété de leurs déposants respectifs.