p PatchFirst

ALSA-2024:5402

ALSA-2024:5402 · Important: thunderbird security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * Thunderbird: 115.14/128.1 () * mozilla: Fullscreen notification dialog can be obscured by document content (CVE-2024-7518) * mozilla: Out of bounds memory access in graphics shared memory handling (CVE-2024-7519) * mozilla: Type confusion in WebAssembly (CVE-2024-7520) * mozilla: Incomplete WebAssembly exception handing (CVE-2024-7521) * mozilla: Out of bounds read in editor component (CVE-2024-7522) * mozilla: Missing permission check when creating a StreamFilter (CVE-2024-7525) * mozilla: Uninitialized memory used by WebGL (CVE-2024-7526) * mozilla: Use-after-free in JavaScript garbage collection (CVE-2024-7527) * mozilla: Use-after-free in IndexedDB (CVE-2024-7528) * mozilla: Document content could partially obscure security prompts (CVE-2024-7529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • thunderbird AlmaLinux:8

    Affected ranges
    • ECOSYSTEM: < 115.14.0-1.el8_10.alma.1

    Update to 115.14.0-1.el8_10.alma.1

Original sources

Check your server →