Red Hat Product Errata RHSA-2024:8025 - Security Advisory
Issued:
2024-10-14
Updated:
2024-10-14

RHSA-2024:8025 - Security Advisory

Synopsis

Important: thunderbird security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for thunderbird is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

  • firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill) (CVE-2024-9680)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2317442 - CVE-2024-9680 firefox: Use-after-free in Animation timeline (128.3.1 ESR Chemspill)

Red Hat Enterprise Linux for x86_64 9

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
x86_64
thunderbird-128.3.1-1.el9_4.x86_64.rpm SHA-256: 5057efbc05b2599849290b2dcc031cc4dc4eb53943f6f859583b7c39bd50b904
thunderbird-debuginfo-128.3.1-1.el9_4.x86_64.rpm SHA-256: 6968b24b406ad93742740e1c1824219a5e871ed49a4fbd9d7d6eabbaefd3f7b1
thunderbird-debugsource-128.3.1-1.el9_4.x86_64.rpm SHA-256: 43ad17da513eb27361e94a163321bd59066e5e2498a396679856fed1a89366fe

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
x86_64
thunderbird-128.3.1-1.el9_4.x86_64.rpm SHA-256: 5057efbc05b2599849290b2dcc031cc4dc4eb53943f6f859583b7c39bd50b904
thunderbird-debuginfo-128.3.1-1.el9_4.x86_64.rpm SHA-256: 6968b24b406ad93742740e1c1824219a5e871ed49a4fbd9d7d6eabbaefd3f7b1
thunderbird-debugsource-128.3.1-1.el9_4.x86_64.rpm SHA-256: 43ad17da513eb27361e94a163321bd59066e5e2498a396679856fed1a89366fe

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
x86_64
thunderbird-128.3.1-1.el9_4.x86_64.rpm SHA-256: 5057efbc05b2599849290b2dcc031cc4dc4eb53943f6f859583b7c39bd50b904
thunderbird-debuginfo-128.3.1-1.el9_4.x86_64.rpm SHA-256: 6968b24b406ad93742740e1c1824219a5e871ed49a4fbd9d7d6eabbaefd3f7b1
thunderbird-debugsource-128.3.1-1.el9_4.x86_64.rpm SHA-256: 43ad17da513eb27361e94a163321bd59066e5e2498a396679856fed1a89366fe

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
x86_64
thunderbird-128.3.1-1.el9_4.x86_64.rpm SHA-256: 5057efbc05b2599849290b2dcc031cc4dc4eb53943f6f859583b7c39bd50b904
thunderbird-debuginfo-128.3.1-1.el9_4.x86_64.rpm SHA-256: 6968b24b406ad93742740e1c1824219a5e871ed49a4fbd9d7d6eabbaefd3f7b1
thunderbird-debugsource-128.3.1-1.el9_4.x86_64.rpm SHA-256: 43ad17da513eb27361e94a163321bd59066e5e2498a396679856fed1a89366fe

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
x86_64
thunderbird-128.3.1-1.el9_4.x86_64.rpm SHA-256: 5057efbc05b2599849290b2dcc031cc4dc4eb53943f6f859583b7c39bd50b904
thunderbird-debuginfo-128.3.1-1.el9_4.x86_64.rpm SHA-256: 6968b24b406ad93742740e1c1824219a5e871ed49a4fbd9d7d6eabbaefd3f7b1
thunderbird-debugsource-128.3.1-1.el9_4.x86_64.rpm SHA-256: 43ad17da513eb27361e94a163321bd59066e5e2498a396679856fed1a89366fe

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
s390x
thunderbird-128.3.1-1.el9_4.s390x.rpm SHA-256: 96deda01972efe7fc88943dc3d6056146e8d323f864afb2b44858519b12a2c32
thunderbird-debuginfo-128.3.1-1.el9_4.s390x.rpm SHA-256: 3b64863731797672615f9f49b52ba228c656a3b8ba9f6f1095e48de341359bd9
thunderbird-debugsource-128.3.1-1.el9_4.s390x.rpm SHA-256: 5565e4e17754f262f643ed0d627a202c900db4bc1898ce1c6cb2f82564745b0a

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
s390x
thunderbird-128.3.1-1.el9_4.s390x.rpm SHA-256: 96deda01972efe7fc88943dc3d6056146e8d323f864afb2b44858519b12a2c32
thunderbird-debuginfo-128.3.1-1.el9_4.s390x.rpm SHA-256: 3b64863731797672615f9f49b52ba228c656a3b8ba9f6f1095e48de341359bd9
thunderbird-debugsource-128.3.1-1.el9_4.s390x.rpm SHA-256: 5565e4e17754f262f643ed0d627a202c900db4bc1898ce1c6cb2f82564745b0a

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
s390x
thunderbird-128.3.1-1.el9_4.s390x.rpm SHA-256: 96deda01972efe7fc88943dc3d6056146e8d323f864afb2b44858519b12a2c32
thunderbird-debuginfo-128.3.1-1.el9_4.s390x.rpm SHA-256: 3b64863731797672615f9f49b52ba228c656a3b8ba9f6f1095e48de341359bd9
thunderbird-debugsource-128.3.1-1.el9_4.s390x.rpm SHA-256: 5565e4e17754f262f643ed0d627a202c900db4bc1898ce1c6cb2f82564745b0a

Red Hat Enterprise Linux for Power, little endian 9

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
ppc64le
thunderbird-128.3.1-1.el9_4.ppc64le.rpm SHA-256: 50c53373b6329685897d9c301be1ffd356c543dcc0e5abf5a2d68a875017e6a6
thunderbird-debuginfo-128.3.1-1.el9_4.ppc64le.rpm SHA-256: af809bea6f88f4a8439160e184310a14a6872f133c66c8d26fe4ebe6f1c820b7
thunderbird-debugsource-128.3.1-1.el9_4.ppc64le.rpm SHA-256: 2371236076dbfa04b38966af0e3d9a37d6f16cb4e6eff24a201127575b5f3945

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
ppc64le
thunderbird-128.3.1-1.el9_4.ppc64le.rpm SHA-256: 50c53373b6329685897d9c301be1ffd356c543dcc0e5abf5a2d68a875017e6a6
thunderbird-debuginfo-128.3.1-1.el9_4.ppc64le.rpm SHA-256: af809bea6f88f4a8439160e184310a14a6872f133c66c8d26fe4ebe6f1c820b7
thunderbird-debugsource-128.3.1-1.el9_4.ppc64le.rpm SHA-256: 2371236076dbfa04b38966af0e3d9a37d6f16cb4e6eff24a201127575b5f3945

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
ppc64le
thunderbird-128.3.1-1.el9_4.ppc64le.rpm SHA-256: 50c53373b6329685897d9c301be1ffd356c543dcc0e5abf5a2d68a875017e6a6
thunderbird-debuginfo-128.3.1-1.el9_4.ppc64le.rpm SHA-256: af809bea6f88f4a8439160e184310a14a6872f133c66c8d26fe4ebe6f1c820b7
thunderbird-debugsource-128.3.1-1.el9_4.ppc64le.rpm SHA-256: 2371236076dbfa04b38966af0e3d9a37d6f16cb4e6eff24a201127575b5f3945

Red Hat Enterprise Linux for ARM 64 9

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
aarch64
thunderbird-128.3.1-1.el9_4.aarch64.rpm SHA-256: 6b9a7f2f36f7973f83183b2a730b0a0aee59315c56e9e5da88fc7a07a60a5711
thunderbird-debuginfo-128.3.1-1.el9_4.aarch64.rpm SHA-256: a2ce51faf6d51c0341753c5709849fa8ce5466bb462d625c83892419b18650be
thunderbird-debugsource-128.3.1-1.el9_4.aarch64.rpm SHA-256: 4ca35dbb1c600b17939c6a4a269c2642a1ac45e57011c27560efe70a11e4743c

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
aarch64
thunderbird-128.3.1-1.el9_4.aarch64.rpm SHA-256: 6b9a7f2f36f7973f83183b2a730b0a0aee59315c56e9e5da88fc7a07a60a5711
thunderbird-debuginfo-128.3.1-1.el9_4.aarch64.rpm SHA-256: a2ce51faf6d51c0341753c5709849fa8ce5466bb462d625c83892419b18650be
thunderbird-debugsource-128.3.1-1.el9_4.aarch64.rpm SHA-256: 4ca35dbb1c600b17939c6a4a269c2642a1ac45e57011c27560efe70a11e4743c

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
aarch64
thunderbird-128.3.1-1.el9_4.aarch64.rpm SHA-256: 6b9a7f2f36f7973f83183b2a730b0a0aee59315c56e9e5da88fc7a07a60a5711
thunderbird-debuginfo-128.3.1-1.el9_4.aarch64.rpm SHA-256: a2ce51faf6d51c0341753c5709849fa8ce5466bb462d625c83892419b18650be
thunderbird-debugsource-128.3.1-1.el9_4.aarch64.rpm SHA-256: 4ca35dbb1c600b17939c6a4a269c2642a1ac45e57011c27560efe70a11e4743c

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
ppc64le
thunderbird-128.3.1-1.el9_4.ppc64le.rpm SHA-256: 50c53373b6329685897d9c301be1ffd356c543dcc0e5abf5a2d68a875017e6a6
thunderbird-debuginfo-128.3.1-1.el9_4.ppc64le.rpm SHA-256: af809bea6f88f4a8439160e184310a14a6872f133c66c8d26fe4ebe6f1c820b7
thunderbird-debugsource-128.3.1-1.el9_4.ppc64le.rpm SHA-256: 2371236076dbfa04b38966af0e3d9a37d6f16cb4e6eff24a201127575b5f3945

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
ppc64le
thunderbird-128.3.1-1.el9_4.ppc64le.rpm SHA-256: 50c53373b6329685897d9c301be1ffd356c543dcc0e5abf5a2d68a875017e6a6
thunderbird-debuginfo-128.3.1-1.el9_4.ppc64le.rpm SHA-256: af809bea6f88f4a8439160e184310a14a6872f133c66c8d26fe4ebe6f1c820b7
thunderbird-debugsource-128.3.1-1.el9_4.ppc64le.rpm SHA-256: 2371236076dbfa04b38966af0e3d9a37d6f16cb4e6eff24a201127575b5f3945

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
x86_64
thunderbird-128.3.1-1.el9_4.x86_64.rpm SHA-256: 5057efbc05b2599849290b2dcc031cc4dc4eb53943f6f859583b7c39bd50b904
thunderbird-debuginfo-128.3.1-1.el9_4.x86_64.rpm SHA-256: 6968b24b406ad93742740e1c1824219a5e871ed49a4fbd9d7d6eabbaefd3f7b1
thunderbird-debugsource-128.3.1-1.el9_4.x86_64.rpm SHA-256: 43ad17da513eb27361e94a163321bd59066e5e2498a396679856fed1a89366fe

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
x86_64
thunderbird-128.3.1-1.el9_4.x86_64.rpm SHA-256: 5057efbc05b2599849290b2dcc031cc4dc4eb53943f6f859583b7c39bd50b904
thunderbird-debuginfo-128.3.1-1.el9_4.x86_64.rpm SHA-256: 6968b24b406ad93742740e1c1824219a5e871ed49a4fbd9d7d6eabbaefd3f7b1
thunderbird-debugsource-128.3.1-1.el9_4.x86_64.rpm SHA-256: 43ad17da513eb27361e94a163321bd59066e5e2498a396679856fed1a89366fe

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
aarch64
thunderbird-128.3.1-1.el9_4.aarch64.rpm SHA-256: 6b9a7f2f36f7973f83183b2a730b0a0aee59315c56e9e5da88fc7a07a60a5711
thunderbird-debuginfo-128.3.1-1.el9_4.aarch64.rpm SHA-256: a2ce51faf6d51c0341753c5709849fa8ce5466bb462d625c83892419b18650be
thunderbird-debugsource-128.3.1-1.el9_4.aarch64.rpm SHA-256: 4ca35dbb1c600b17939c6a4a269c2642a1ac45e57011c27560efe70a11e4743c

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
aarch64
thunderbird-128.3.1-1.el9_4.aarch64.rpm SHA-256: 6b9a7f2f36f7973f83183b2a730b0a0aee59315c56e9e5da88fc7a07a60a5711
thunderbird-debuginfo-128.3.1-1.el9_4.aarch64.rpm SHA-256: a2ce51faf6d51c0341753c5709849fa8ce5466bb462d625c83892419b18650be
thunderbird-debugsource-128.3.1-1.el9_4.aarch64.rpm SHA-256: 4ca35dbb1c600b17939c6a4a269c2642a1ac45e57011c27560efe70a11e4743c

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
s390x
thunderbird-128.3.1-1.el9_4.s390x.rpm SHA-256: 96deda01972efe7fc88943dc3d6056146e8d323f864afb2b44858519b12a2c32
thunderbird-debuginfo-128.3.1-1.el9_4.s390x.rpm SHA-256: 3b64863731797672615f9f49b52ba228c656a3b8ba9f6f1095e48de341359bd9
thunderbird-debugsource-128.3.1-1.el9_4.s390x.rpm SHA-256: 5565e4e17754f262f643ed0d627a202c900db4bc1898ce1c6cb2f82564745b0a

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
thunderbird-128.3.1-1.el9_4.src.rpm SHA-256: d4cc530ff9e01908e08340c6c41c5ba7b36561f007001ccbd5879061df35e82b
s390x
thunderbird-128.3.1-1.el9_4.s390x.rpm SHA-256: 96deda01972efe7fc88943dc3d6056146e8d323f864afb2b44858519b12a2c32
thunderbird-debuginfo-128.3.1-1.el9_4.s390x.rpm SHA-256: 3b64863731797672615f9f49b52ba228c656a3b8ba9f6f1095e48de341359bd9
thunderbird-debugsource-128.3.1-1.el9_4.s390x.rpm SHA-256: 5565e4e17754f262f643ed0d627a202c900db4bc1898ce1c6cb2f82564745b0a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.