RHSA-2024:4003HighCVSS 7.5

Red Hat Security Advisory: thunderbird security update

Published
June 20, 2024
Last Modified
November 3, 2026

🔗 CVE IDs covered (7)

CVE-2024-5696 →CVE-2024-5700 →CVE-2024-5702 →CVE-2024-5688 →CVE-2024-5690 →CVE-2024-5691 →CVE-2024-5693 →

📋 Description

CVE-2024-5688 — Mozilla: Use-after-free in JavaScript object transplant CVE-2024-5690 — Mozilla: External protocol handlers leaked by timing attack CVE-2024-5691 — Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window CVE-2024-5693 — Mozilla: Cross-Origin Image leak via Offscreen Canvas CVE-2024-5696 — Mozilla: Memory Corruption in Text Fragments CVE-2024-5700 — Mozilla: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 CVE-2024-5702 — Mozilla: Use-after-free in networking

🎯 Affected products18

  • Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • thunderbird-0:115.12.1-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • thunderbird-0:115.12.1-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • thunderbird-0:115.12.1-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • thunderbird-0:115.12.1-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • thunderbird-0:115.12.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • thunderbird-0:115.12.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • thunderbird-0:115.12.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • thunderbird-debuginfo-0:115.12.1-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • thunderbird-debuginfo-0:115.12.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • thunderbird-debuginfo-0:115.12.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • thunderbird-debuginfo-0:115.12.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)
  • thunderbird-debugsource-0:115.12.1-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • thunderbird-debugsource-0:115.12.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • thunderbird-debugsource-0:115.12.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.4)
  • thunderbird-debugsource-0:115.12.1-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.4)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.

🔗 References (10)