[nzlug] [Fwd: FW: CCIP EXTERNAL ADVISORY REDISTRIBUTION ~ Ubuntu update for mozilla-thunderbird unclassified]

[Sid Bachtiar]

> Ubuntu has issued an update for mozilla-thunderbird. This fixes some
> vulnerabilities, which can be exploited by malicious people to bypass
> certain security restrictions, conduct cross-site scripting and HTTP
> response smuggling attacks, and potentially compromise a user's system.

conduct cross-site scripting meaning fake javascript popups? It can't
be as serious as a security vulnerabilities that will allow malicious
ActiveX component to be executed?