ALSA-2024:3784
ALSA-2024:3784 · Moderate: thunderbird security update
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.11.0. Security Fix(es): * firefox: Arbitrary JavaScript execution in PDF.js (CVE-2024-4367) * firefox: IndexedDB files retained in private browsing mode (CVE-2024-4767) * firefox: Potential permissions request bypass via clickjacking (CVE-2024-4768) * firefox: Cross-origin responses could be distinguished between script and non-script content-types (CVE-2024-4769) * firefox: Use-after-free could occur when printing to PDF (CVE-2024-4770) * firefox: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 (CVE-2024-4777) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
thunderbird AlmaLinux:8
- Intervalos de versiones afectados
- ECOSYSTEM: < 115.11.0-1.el8_10.alma.1
Actualiza a 115.11.0-1.el8_10.alma.1
Fuentes originales
- https://access.redhat.com/errata/RHSA-2024:3784
- https://access.redhat.com/security/cve/CVE-2024-4367
- https://access.redhat.com/security/cve/CVE-2024-4767
- https://access.redhat.com/security/cve/CVE-2024-4768
- https://access.redhat.com/security/cve/CVE-2024-4769
- https://access.redhat.com/security/cve/CVE-2024-4770
- https://access.redhat.com/security/cve/CVE-2024-4777
- https://bugzilla.redhat.com/2280382
- https://bugzilla.redhat.com/2280383
- https://bugzilla.redhat.com/2280384
- https://bugzilla.redhat.com/2280385
- https://bugzilla.redhat.com/2280386
- https://bugzilla.redhat.com/2280387
- https://errata.almalinux.org/8/ALSA-2024-3784.html
- https://osv.dev/vulnerability/ALSA-2024:3784