Red Hat Product Errata RHSA-2024:5402 - Security Advisory
Issued:
2024-08-14
Updated:
2024-08-14

RHSA-2024:5402 - Security Advisory

Synopsis

Important: thunderbird security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for thunderbird is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • Thunderbird: 115.14/128.1 ()
  • mozilla: Fullscreen notification dialog can be obscured by document content (CVE-2024-7518)
  • mozilla: Out of bounds memory access in graphics shared memory handling (CVE-2024-7519)
  • mozilla: Type confusion in WebAssembly (CVE-2024-7520)
  • mozilla: Incomplete WebAssembly exception handing (CVE-2024-7521)
  • mozilla: Out of bounds read in editor component (CVE-2024-7522)
  • mozilla: Missing permission check when creating a StreamFilter (CVE-2024-7525)
  • mozilla: Uninitialized memory used by WebGL (CVE-2024-7526)
  • mozilla: Use-after-free in JavaScript garbage collection (CVE-2024-7527)
  • mozilla: Use-after-free in IndexedDB (CVE-2024-7528)
  • mozilla: Document content could partially obscure security prompts (CVE-2024-7529)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

(none)

Red Hat Enterprise Linux for x86_64 8

SRPM
thunderbird-115.14.0-1.el8_10.src.rpm SHA-256: d2ede6c2e7bace6c51bf2d82d973338796072266759c4e42e2f5242f0e7fae0a
x86_64
thunderbird-115.14.0-1.el8_10.x86_64.rpm SHA-256: 8fc9d2bcb47bd987e440be56b720f0b5ebe20940f1ccb19079cec1009e1081c2
thunderbird-debuginfo-115.14.0-1.el8_10.x86_64.rpm SHA-256: 7573922884033a2cb9b720fe4052b8e75ff2e7cc70ac40f0b804081e488b7ed6
thunderbird-debugsource-115.14.0-1.el8_10.x86_64.rpm SHA-256: ca8163d2a36bb43cdc71e3f956230757eb871b6c27452e55e3100ad10d6b9a06

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
thunderbird-115.14.0-1.el8_10.src.rpm SHA-256: d2ede6c2e7bace6c51bf2d82d973338796072266759c4e42e2f5242f0e7fae0a
s390x
thunderbird-115.14.0-1.el8_10.s390x.rpm SHA-256: 2d8d89de6ae5207778c358dad4567a9dcf8fc8a511b037f679a4dbdb50d2f286
thunderbird-debuginfo-115.14.0-1.el8_10.s390x.rpm SHA-256: 2bb3a1fc669fb3efd905d1c06ef138455d1f0c985cd6918021c914a61d97da1a
thunderbird-debugsource-115.14.0-1.el8_10.s390x.rpm SHA-256: be8d3d27681475b216bb5d9d1e4adb567ad61f8b75aa84eaffec2a1b8f3b22d7

Red Hat Enterprise Linux for Power, little endian 8

SRPM
thunderbird-115.14.0-1.el8_10.src.rpm SHA-256: d2ede6c2e7bace6c51bf2d82d973338796072266759c4e42e2f5242f0e7fae0a
ppc64le
thunderbird-115.14.0-1.el8_10.ppc64le.rpm SHA-256: 0c3ba99b89f0b2658e11cfe85a41f1f772c64b446bc64120fb9376dbd44035cf
thunderbird-debuginfo-115.14.0-1.el8_10.ppc64le.rpm SHA-256: 65ed14e0681fe714550c64ebf997b44192614977c2d8b8e089ce0db8f061e8e5
thunderbird-debugsource-115.14.0-1.el8_10.ppc64le.rpm SHA-256: 98c7df085422989aab2c0d86b606903e759d8e91727bc68f698a6a2cc5e6ccf8

Red Hat Enterprise Linux for ARM 64 8

SRPM
thunderbird-115.14.0-1.el8_10.src.rpm SHA-256: d2ede6c2e7bace6c51bf2d82d973338796072266759c4e42e2f5242f0e7fae0a
aarch64
thunderbird-115.14.0-1.el8_10.aarch64.rpm SHA-256: cea1072e59e6ea6f81c35507810854d3fb0265bc8651eff5c21a24c9cdbd439b
thunderbird-debuginfo-115.14.0-1.el8_10.aarch64.rpm SHA-256: 1435f0ace8b935225b95a3c10bcce4937e18de9cc51fefd7209583eacf15571c
thunderbird-debugsource-115.14.0-1.el8_10.aarch64.rpm SHA-256: 2ff85dfd8e356ab77b9221109f6f7f83e71f19de2610ec4d521a7b677a430c6c

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.