Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Mageia: 2024-0024 Critical: Thunderbird Code Execution & Crash

mageia
Calendar Grey February 4, 2024
Dist Mageia Esm H88
Mageia 2024-0025 resolves multiple vulnerabilities found in LibreOffice that could lead to crashes and unauthorized code execution.
Out of bounds write in ANGLE

Summary

Out of bounds write in ANGLE. (CVE-2024-0741)
Failure to update user input timestamp. (CVE-2024-0742)
Crash when listing printers on Linux. (CVE-2024-0746)
Bypass of Content Security Policy when directive unsafe-inline was set. (CVE-2024-0747)
Phishing site popup could show local origin in address bar. (CVE-2024-0749)
Potential permissions request bypass via clickjacking. (CVE-2024-0750)
Privilege escalation through devtools. (CVE-2024-0751)
HSTS policy on subdomain could bypass policy of upper domain. (CVE-2024-0753)
Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. (CVE-2024-0755)

References

- https://bugs.mageia.org/show_bug.cgi?id=32763

- https://www.thunderbird.net/en-US/thunderbird/115.6.1/releasenotes/

- https://www.thunderbird.net/en-US/thunderbird/115.7.0/releasenotes/

- https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/

- https://www.cve.org/CVERecord?id=CVE-2024-0741

- https://www.cve.org/CVERecord?id=CVE-2024-0742

- https://www.cve.org/CVERecord?id=CVE-2024-0746

- https://www.cve.org/CVERecord?id=CVE-2024-0747

- https://www.cve.org/CVERecord?id=CVE-2024-0749

- https://www.cve.org/CVERecord?id=CVE-2024-0750

- https://www.cve.org/CVERecord?id=CVE-2024-0751

- https://www.cve.org/CVERecord?id=CVE-2024-0753

- https://www.cve.org/CVERecord?id=CVE-2024-0755

Topics%20covered

Topics Covered

security advisory update code execution issue thunderbird crash mageia

Resolution

SRPMS

- 9/core/thunderbird-115.7.0-1.mga9

- 9/core/thunderbird-l10n-115.7.0-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 04 Feb 2024
URL: https://advisories.mageia.org/MGASA-2024-0024.html
Type: security
CVE: CVE-2024-0741, CVE-2024-0742, CVE-2024-0746, CVE-2024-0747, CVE-2024-0749, CVE-2024-0750, CVE-2024-0751, CVE-2024-0753, CVE-2024-0755

Topics%20covered

Topics Covered

security advisory update code execution issue thunderbird crash mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here