RHSA-2024:4016HighCVSS 7.5

Red Hat Security Advisory: thunderbird security update

Published
June 20, 2024
Last Modified
November 3, 2026

🔗 CVE IDs covered (7)

CVE-2024-5700 →CVE-2024-5702 →CVE-2024-5688 →CVE-2024-5690 →CVE-2024-5691 →CVE-2024-5693 →CVE-2024-5696 →

📋 Description

CVE-2024-5688 — Mozilla: Use-after-free in JavaScript object transplant CVE-2024-5690 — Mozilla: External protocol handlers leaked by timing attack CVE-2024-5691 — Mozilla: Sandboxed iframes were able to bypass sandbox restrictions to open a new window CVE-2024-5693 — Mozilla: Cross-Origin Image leak via Offscreen Canvas CVE-2024-5696 — Mozilla: Memory Corruption in Text Fragments CVE-2024-5700 — Mozilla: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 CVE-2024-5702 — Mozilla: Use-after-free in networking

🎯 Affected products14

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • thunderbird-0:115.12.1-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • thunderbird-0:115.12.1-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)
  • thunderbird-0:115.12.1-1.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • thunderbird-0:115.12.1-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • thunderbird-0:115.12.1-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • thunderbird-0:115.12.1-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • thunderbird-0:115.12.1-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • thunderbird-debuginfo-0:115.12.1-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • thunderbird-debuginfo-0:115.12.1-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • thunderbird-debuginfo-0:115.12.1-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
  • thunderbird-debuginfo-0:115.12.1-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)

✅ Remediation

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect.

🔗 References (10)